./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3264632814 <...> DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./678/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./678/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./678/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./678/file0") = 0 [pid 5028] umount2("./678/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./678/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./678/cgroup") = 0 [pid 5028] umount2("./678/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./678/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./678/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./678") = 0 [pid 5028] mkdir("./679", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7055 attached , child_tidptr=0x5555563a5690) = 2019 [pid 7055] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7055] chdir("./679") = 0 [pid 7055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7055] setpgid(0, 0) = 0 [pid 7055] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7055] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7055] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7055] write(3, "1000", 4) = 4 [pid 7055] close(3) = 0 [pid 7055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7055] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7055] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7055] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7055] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7056 attached [pid 7056] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7055] <... clone3 resumed> => {parent_tid=[2020]}, 88) = 2020 [pid 7056] <... rseq resumed>) = 0 [pid 7055] rt_sigprocmask(SIG_SETMASK, [], [pid 7056] set_robust_list(0x7feeffcce9a0, 24 [pid 7055] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7056] <... set_robust_list resumed>) = 0 [pid 7055] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7055] <... futex resumed>) = 0 [pid 7055] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7056] memfd_create("syzkaller", 0) = 3 [pid 7056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7056] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7056] munmap(0x7feef78ae000, 2097152) = 0 [pid 7056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7056] close(3) = 0 [pid 7056] mkdir("./file0", 0777) = 0 [pid 7056] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7056] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7056] chdir("./file0") = 0 [pid 7056] ioctl(4, LOOP_CLR_FD) = 0 [pid 7056] close(4) = 0 [pid 7056] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7055] <... futex resumed>) = 0 [pid 7056] <... futex resumed>) = 1 [pid 7055] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7056] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7055] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7056] <... openat resumed>) = 4 [pid 7056] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7055] <... futex resumed>) = 0 [pid 7055] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7056] <... futex resumed>) = 1 [pid 7055] <... futex resumed>) = 0 [pid 7055] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7056] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7056] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7055] <... futex resumed>) = 0 [pid 7056] <... futex resumed>) = 1 [pid 7055] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 221.708299][ T7056] loop0: detected capacity change from 0 to 4096 [ 221.717561][ T7056] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 221.749842][ T7056] ntfs: volume version 3.1. [pid 7056] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7055] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7055] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7055] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7055] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7055] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7057 attached [pid 7057] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7055] <... clone3 resumed> => {parent_tid=[2021]}, 88) = 2021 [pid 7057] <... rseq resumed>) = 0 [pid 7055] rt_sigprocmask(SIG_SETMASK, [], [pid 7057] set_robust_list(0x7feef7aad9a0, 24 [pid 7055] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7057] <... set_robust_list resumed>) = 0 [pid 7057] rt_sigprocmask(SIG_SETMASK, [], [pid 7055] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7057] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7057] ftruncate(4, 0 [pid 7055] <... futex resumed>) = 0 [pid 7055] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7057] <... ftruncate resumed>) = 0 [pid 7057] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7056] <... write resumed>) = 1048064 [pid 7057] <... futex resumed>) = 1 [pid 7056] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7055] <... futex resumed>) = 0 [pid 7056] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7057] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7055] close(3) = 0 [pid 7055] close(4) = 0 [pid 7055] close(5) = 0 [pid 7055] close(6) = -1 EBADF (Bad file descriptor) [pid 7055] close(7) = -1 EBADF (Bad file descriptor) [pid 7055] close(8) = -1 EBADF (Bad file descriptor) [pid 7055] close(9) = -1 EBADF (Bad file descriptor) [pid 7055] close(10) = -1 EBADF (Bad file descriptor) [pid 7055] close(11) = -1 EBADF (Bad file descriptor) [pid 7055] close(12) = -1 EBADF (Bad file descriptor) [pid 7055] close(13) = -1 EBADF (Bad file descriptor) [pid 7055] close(14) = -1 EBADF (Bad file descriptor) [pid 7055] close(15) = -1 EBADF (Bad file descriptor) [pid 7055] close(16) = -1 EBADF (Bad file descriptor) [pid 7055] close(17) = -1 EBADF (Bad file descriptor) [pid 7055] close(18) = -1 EBADF (Bad file descriptor) [pid 7055] close(19) = -1 EBADF (Bad file descriptor) [pid 7055] close(20) = -1 EBADF (Bad file descriptor) [pid 7055] close(21) = -1 EBADF (Bad file descriptor) [pid 7055] close(22) = -1 EBADF (Bad file descriptor) [pid 7055] close(23) = -1 EBADF (Bad file descriptor) [pid 7055] close(24) = -1 EBADF (Bad file descriptor) [pid 7055] close(25) = -1 EBADF (Bad file descriptor) [pid 7055] close(26) = -1 EBADF (Bad file descriptor) [pid 7055] close(27) = -1 EBADF (Bad file descriptor) [pid 7055] close(28) = -1 EBADF (Bad file descriptor) [pid 7055] close(29) = -1 EBADF (Bad file descriptor) [pid 7055] exit_group(0 [pid 7057] <... futex resumed>) = ? [pid 7056] <... futex resumed>) = ? [pid 7055] <... exit_group resumed>) = ? [pid 7056] +++ exited with 0 +++ [pid 7057] +++ exited with 0 +++ [pid 7055] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2019, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./679", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./679", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./679/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./679/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./679/cgroup.cpu") = 0 [pid 5028] umount2("./679/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./679/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./679/binderfs") = 0 [pid 5028] umount2("./679/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./679/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./679/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./679/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./679/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./679/file0") = 0 [pid 5028] umount2("./679/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./679/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./679/cgroup") = 0 [pid 5028] umount2("./679/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./679/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./679/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./679") = 0 [pid 5028] mkdir("./680", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7058 attached [pid 7058] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2022 [pid 7058] <... set_robust_list resumed>) = 0 [pid 7058] chdir("./680") = 0 [pid 7058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7058] setpgid(0, 0) = 0 [pid 7058] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7058] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7058] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7058] write(3, "1000", 4) = 4 [pid 7058] close(3) = 0 [pid 7058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7058] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7058] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7058] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7058] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2023]}, 88) = 2023 [pid 7058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7058] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7058] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7059 attached [pid 7059] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7059] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7059] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7059] memfd_create("syzkaller", 0) = 3 [pid 7059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7059] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7059] munmap(0x7feef78ae000, 2097152) = 0 [pid 7059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7059] close(3) = 0 [pid 7059] mkdir("./file0", 0777) = 0 [pid 7059] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7059] chdir("./file0") = 0 [pid 7059] ioctl(4, LOOP_CLR_FD) = 0 [pid 7059] close(4) = 0 [pid 7059] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7058] <... futex resumed>) = 0 [pid 7059] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7058] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7058] <... futex resumed>) = 0 [pid 7059] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7058] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7059] <... openat resumed>) = 4 [pid 7059] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] <... futex resumed>) = 0 [pid 7059] <... futex resumed>) = 1 [pid 7058] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7058] <... futex resumed>) = 0 [pid 7058] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7059] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7059] <... futex resumed>) = 0 [pid 7058] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7059] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7058] <... futex resumed>) = 0 [ 221.941041][ T7059] loop0: detected capacity change from 0 to 4096 [ 221.951087][ T7059] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 221.985174][ T7059] ntfs: volume version 3.1. [pid 7058] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7058] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7058] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7058] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7058] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2024]}, 88) = 2024 [pid 7058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7058] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7062 attached ) = 0 [pid 7058] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7062] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7062] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7062] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7062] ftruncate(4, 0) = 0 [pid 7062] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7059] <... write resumed>) = 1048064 [pid 7058] <... futex resumed>) = 0 [pid 7062] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7059] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7058] close(3 [pid 7059] <... futex resumed>) = 0 [pid 7058] <... close resumed>) = 0 [pid 7059] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7058] close(4) = 0 [pid 7058] close(5) = 0 [pid 7058] close(6) = -1 EBADF (Bad file descriptor) [pid 7058] close(7) = -1 EBADF (Bad file descriptor) [pid 7058] close(8) = -1 EBADF (Bad file descriptor) [pid 7058] close(9) = -1 EBADF (Bad file descriptor) [pid 7058] close(10) = -1 EBADF (Bad file descriptor) [pid 7058] close(11) = -1 EBADF (Bad file descriptor) [pid 7058] close(12) = -1 EBADF (Bad file descriptor) [pid 7058] close(13) = -1 EBADF (Bad file descriptor) [pid 7058] close(14) = -1 EBADF (Bad file descriptor) [pid 7058] close(15) = -1 EBADF (Bad file descriptor) [pid 7058] close(16) = -1 EBADF (Bad file descriptor) [pid 7058] close(17) = -1 EBADF (Bad file descriptor) [pid 7058] close(18) = -1 EBADF (Bad file descriptor) [pid 7058] close(19) = -1 EBADF (Bad file descriptor) [pid 7058] close(20) = -1 EBADF (Bad file descriptor) [pid 7058] close(21) = -1 EBADF (Bad file descriptor) [pid 7058] close(22) = -1 EBADF (Bad file descriptor) [pid 7058] close(23) = -1 EBADF (Bad file descriptor) [pid 7058] close(24) = -1 EBADF (Bad file descriptor) [pid 7058] close(25) = -1 EBADF (Bad file descriptor) [pid 7058] close(26) = -1 EBADF (Bad file descriptor) [pid 7058] close(27) = -1 EBADF (Bad file descriptor) [pid 7058] close(28) = -1 EBADF (Bad file descriptor) [pid 7058] close(29) = -1 EBADF (Bad file descriptor) [pid 7058] exit_group(0 [pid 7059] <... futex resumed>) = ? [pid 7058] <... exit_group resumed>) = ? [pid 7062] <... futex resumed>) = ? [pid 7059] +++ exited with 0 +++ [pid 7062] +++ exited with 0 +++ [pid 7058] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2022, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./680", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./680", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./680/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./680/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./680/cgroup.cpu") = 0 [pid 5028] umount2("./680/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./680/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./680/binderfs") = 0 [pid 5028] umount2("./680/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./680/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./680/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./680/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./680/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./680/file0") = 0 [pid 5028] umount2("./680/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./680/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./680/cgroup") = 0 [pid 5028] umount2("./680/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./680/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./680/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./680") = 0 [pid 5028] mkdir("./681", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7063 attached [pid 7063] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2025 [pid 7063] <... set_robust_list resumed>) = 0 [pid 7063] chdir("./681") = 0 [pid 7063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7063] setpgid(0, 0) = 0 [pid 7063] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7063] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7063] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7063] write(3, "1000", 4) = 4 [pid 7063] close(3) = 0 [pid 7063] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7063] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7063] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7063] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7063] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7063] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7064 attached [pid 7064] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7063] <... clone3 resumed> => {parent_tid=[2026]}, 88) = 2026 [pid 7064] <... rseq resumed>) = 0 [pid 7063] rt_sigprocmask(SIG_SETMASK, [], [pid 7064] set_robust_list(0x7feeffcce9a0, 24 [pid 7063] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7064] <... set_robust_list resumed>) = 0 [pid 7063] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] rt_sigprocmask(SIG_SETMASK, [], [pid 7063] <... futex resumed>) = 0 [pid 7064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7063] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7064] memfd_create("syzkaller", 0) = 3 [pid 7064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7064] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7064] munmap(0x7feef78ae000, 2097152) = 0 [pid 7064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7064] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7064] close(3) = 0 [pid 7064] mkdir("./file0", 0777) = 0 [pid 7064] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7064] chdir("./file0") = 0 [pid 7064] ioctl(4, LOOP_CLR_FD) = 0 [pid 7064] close(4) = 0 [pid 7064] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7063] <... futex resumed>) = 0 [pid 7064] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7063] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7064] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7063] <... futex resumed>) = 0 [pid 7064] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7064] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7063] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7063] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... futex resumed>) = 0 [pid 7063] <... futex resumed>) = 1 [pid 7064] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7063] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7064] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7064] <... futex resumed>) = 0 [pid 7064] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7063] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... futex resumed>) = 0 [pid 7063] <... futex resumed>) = 1 [pid 7064] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 222.200527][ T7064] loop0: detected capacity change from 0 to 4096 [ 222.210820][ T7064] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 222.244583][ T7064] ntfs: volume version 3.1. [pid 7063] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7063] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7063] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7063] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7063] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7063] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7066 attached [pid 7066] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7063] <... clone3 resumed> => {parent_tid=[2027]}, 88) = 2027 [pid 7066] set_robust_list(0x7feef7aad9a0, 24 [pid 7063] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7066] <... set_robust_list resumed>) = 0 [pid 7063] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7066] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7063] <... futex resumed>) = 0 [pid 7066] ftruncate(4, 0) = 0 [pid 7063] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7066] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7064] <... write resumed>) = 1048064 [pid 7063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7066] <... futex resumed>) = 0 [pid 7064] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7063] close(3 [pid 7066] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7064] <... futex resumed>) = 0 [pid 7063] <... close resumed>) = 0 [pid 7064] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7063] close(4) = 0 [pid 7063] close(5) = 0 [pid 7063] close(6) = -1 EBADF (Bad file descriptor) [pid 7063] close(7) = -1 EBADF (Bad file descriptor) [pid 7063] close(8) = -1 EBADF (Bad file descriptor) [pid 7063] close(9) = -1 EBADF (Bad file descriptor) [pid 7063] close(10) = -1 EBADF (Bad file descriptor) [pid 7063] close(11) = -1 EBADF (Bad file descriptor) [pid 7063] close(12) = -1 EBADF (Bad file descriptor) [pid 7063] close(13) = -1 EBADF (Bad file descriptor) [pid 7063] close(14) = -1 EBADF (Bad file descriptor) [pid 7063] close(15) = -1 EBADF (Bad file descriptor) [pid 7063] close(16) = -1 EBADF (Bad file descriptor) [pid 7063] close(17) = -1 EBADF (Bad file descriptor) [pid 7063] close(18) = -1 EBADF (Bad file descriptor) [pid 7063] close(19) = -1 EBADF (Bad file descriptor) [pid 7063] close(20) = -1 EBADF (Bad file descriptor) [pid 7063] close(21) = -1 EBADF (Bad file descriptor) [pid 7063] close(22) = -1 EBADF (Bad file descriptor) [pid 7063] close(23) = -1 EBADF (Bad file descriptor) [pid 7063] close(24) = -1 EBADF (Bad file descriptor) [pid 7063] close(25) = -1 EBADF (Bad file descriptor) [pid 7063] close(26) = -1 EBADF (Bad file descriptor) [pid 7063] close(27) = -1 EBADF (Bad file descriptor) [pid 7063] close(28) = -1 EBADF (Bad file descriptor) [pid 7063] close(29) = -1 EBADF (Bad file descriptor) [pid 7063] exit_group(0) = ? [pid 7066] <... futex resumed>) = ? [pid 7064] <... futex resumed>) = ? [pid 7066] +++ exited with 0 +++ [pid 7064] +++ exited with 0 +++ [pid 7063] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2025, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./681", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./681", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./681/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./681/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./681/cgroup.cpu") = 0 [pid 5028] umount2("./681/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./681/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./681/binderfs") = 0 [pid 5028] umount2("./681/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./681/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./681/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./681/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./681/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./681/file0") = 0 [pid 5028] umount2("./681/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./681/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./681/cgroup") = 0 [pid 5028] umount2("./681/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./681/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./681/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./681") = 0 [pid 5028] mkdir("./682", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7067 attached [pid 7067] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7067] chdir("./682") = 0 [pid 7067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7067] setpgid(0, 0) = 0 [pid 7067] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7067] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2028 [pid 7067] <... symlink resumed>) = 0 [pid 7067] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7067] write(3, "1000", 4) = 4 [pid 7067] close(3) = 0 [pid 7067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7067] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7067] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7067] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7068 attached => {parent_tid=[2029]}, 88) = 2029 [pid 7068] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7067] rt_sigprocmask(SIG_SETMASK, [], [pid 7068] <... rseq resumed>) = 0 [pid 7067] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7068] set_robust_list(0x7feeffcce9a0, 24 [pid 7067] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] <... set_robust_list resumed>) = 0 [pid 7067] <... futex resumed>) = 0 [pid 7068] rt_sigprocmask(SIG_SETMASK, [], [pid 7067] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7068] memfd_create("syzkaller", 0) = 3 [pid 7068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7068] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7068] munmap(0x7feef78ae000, 2097152) = 0 [pid 7068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7068] close(3) = 0 [pid 7068] mkdir("./file0", 0777) = 0 [pid 7068] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7068] chdir("./file0") = 0 [pid 7068] ioctl(4, LOOP_CLR_FD) = 0 [pid 7068] close(4) = 0 [pid 7068] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7067] <... futex resumed>) = 0 [pid 7067] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7067] <... futex resumed>) = 0 [pid 7067] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7068] <... openat resumed>) = 4 [pid 7068] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7067] <... futex resumed>) = 0 [pid 7068] <... futex resumed>) = 1 [pid 7067] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7067] <... futex resumed>) = 0 [pid 7068] <... openat resumed>) = 5 [pid 7067] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7068] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7068] <... futex resumed>) = 0 [pid 7067] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7067] <... futex resumed>) = 0 [ 222.443159][ T7068] loop0: detected capacity change from 0 to 4096 [ 222.452110][ T7068] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 222.485214][ T7068] ntfs: volume version 3.1. [pid 7067] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7067] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7067] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2030]}, 88) = 2030 [pid 7067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7067] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7067] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7069 attached [pid 7069] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7069] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7069] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7069] ftruncate(4, 0) = 0 [pid 7069] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7068] <... write resumed>) = 1048064 [pid 7069] <... futex resumed>) = 1 [pid 7068] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7069] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7068] <... futex resumed>) = 0 [pid 7067] <... futex resumed>) = 0 [pid 7068] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7067] close(3) = 0 [pid 7067] close(4) = 0 [pid 7067] close(5) = 0 [pid 7067] close(6) = -1 EBADF (Bad file descriptor) [pid 7067] close(7) = -1 EBADF (Bad file descriptor) [pid 7067] close(8) = -1 EBADF (Bad file descriptor) [pid 7067] close(9) = -1 EBADF (Bad file descriptor) [pid 7067] close(10) = -1 EBADF (Bad file descriptor) [pid 7067] close(11) = -1 EBADF (Bad file descriptor) [pid 7067] close(12) = -1 EBADF (Bad file descriptor) [pid 7067] close(13) = -1 EBADF (Bad file descriptor) [pid 7067] close(14) = -1 EBADF (Bad file descriptor) [pid 7067] close(15) = -1 EBADF (Bad file descriptor) [pid 7067] close(16) = -1 EBADF (Bad file descriptor) [pid 7067] close(17) = -1 EBADF (Bad file descriptor) [pid 7067] close(18) = -1 EBADF (Bad file descriptor) [pid 7067] close(19) = -1 EBADF (Bad file descriptor) [pid 7067] close(20) = -1 EBADF (Bad file descriptor) [pid 7067] close(21) = -1 EBADF (Bad file descriptor) [pid 7067] close(22) = -1 EBADF (Bad file descriptor) [pid 7067] close(23) = -1 EBADF (Bad file descriptor) [pid 7067] close(24) = -1 EBADF (Bad file descriptor) [pid 7067] close(25) = -1 EBADF (Bad file descriptor) [pid 7067] close(26) = -1 EBADF (Bad file descriptor) [pid 7067] close(27) = -1 EBADF (Bad file descriptor) [pid 7067] close(28) = -1 EBADF (Bad file descriptor) [pid 7067] close(29) = -1 EBADF (Bad file descriptor) [pid 7067] exit_group(0) = ? [pid 7069] <... futex resumed>) = ? [pid 7068] <... futex resumed>) = ? [pid 7069] +++ exited with 0 +++ [pid 7068] +++ exited with 0 +++ [pid 7067] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2028, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./682", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./682", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./682/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./682/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./682/cgroup.cpu") = 0 [pid 5028] umount2("./682/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./682/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./682/binderfs") = 0 [pid 5028] umount2("./682/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./682/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./682/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./682/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./682/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./682/file0") = 0 [pid 5028] umount2("./682/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./682/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./682/cgroup") = 0 [pid 5028] umount2("./682/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./682/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./682/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./682") = 0 [pid 5028] mkdir("./683", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7070 attached , child_tidptr=0x5555563a5690) = 2031 [pid 7070] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7070] chdir("./683") = 0 [pid 7070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7070] setpgid(0, 0) = 0 [pid 7070] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7070] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7070] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7070] write(3, "1000", 4) = 4 [pid 7070] close(3) = 0 [pid 7070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7070] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7070] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7070] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7070] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2032]}, 88) = 2032 [pid 7070] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7070] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7070] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7071 attached [pid 7071] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7071] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7071] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7071] memfd_create("syzkaller", 0) = 3 [pid 7071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7071] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7071] munmap(0x7feef78ae000, 2097152) = 0 [pid 7071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7071] close(3) = 0 [pid 7071] mkdir("./file0", 0777) = 0 [pid 7071] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7071] chdir("./file0") = 0 [pid 7071] ioctl(4, LOOP_CLR_FD) = 0 [pid 7071] close(4) = 0 [pid 7071] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7070] <... futex resumed>) = 0 [pid 7071] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7070] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7070] <... futex resumed>) = 0 [pid 7071] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7070] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7071] <... openat resumed>) = 4 [pid 7071] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7070] <... futex resumed>) = 0 [pid 7071] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7070] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7070] <... futex resumed>) = 0 [pid 7071] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7070] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7071] <... openat resumed>) = 5 [pid 7071] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7070] <... futex resumed>) = 0 [pid 7071] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7070] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7071] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7070] <... futex resumed>) = 0 [ 222.695844][ T7071] loop0: detected capacity change from 0 to 4096 [ 222.705328][ T7071] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 222.738485][ T7071] ntfs: volume version 3.1. [pid 7070] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7070] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7070] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7070] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7070] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7073 attached => {parent_tid=[2033]}, 88) = 2033 [pid 7073] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7070] rt_sigprocmask(SIG_SETMASK, [], [pid 7073] <... rseq resumed>) = 0 [pid 7070] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7073] set_robust_list(0x7feef7aad9a0, 24 [pid 7070] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7070] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7073] <... set_robust_list resumed>) = 0 [pid 7073] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7073] ftruncate(4, 0) = 0 [pid 7073] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7073] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7070] <... futex resumed>) = 0 [pid 7071] <... write resumed>) = 1048064 [pid 7071] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7071] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7070] close(3) = 0 [pid 7070] close(4) = 0 [pid 7070] close(5) = 0 [pid 7070] close(6) = -1 EBADF (Bad file descriptor) [pid 7070] close(7) = -1 EBADF (Bad file descriptor) [pid 7070] close(8) = -1 EBADF (Bad file descriptor) [pid 7070] close(9) = -1 EBADF (Bad file descriptor) [pid 7070] close(10) = -1 EBADF (Bad file descriptor) [pid 7070] close(11) = -1 EBADF (Bad file descriptor) [pid 7070] close(12) = -1 EBADF (Bad file descriptor) [pid 7070] close(13) = -1 EBADF (Bad file descriptor) [pid 7070] close(14) = -1 EBADF (Bad file descriptor) [pid 7070] close(15) = -1 EBADF (Bad file descriptor) [pid 7070] close(16) = -1 EBADF (Bad file descriptor) [pid 7070] close(17) = -1 EBADF (Bad file descriptor) [pid 7070] close(18) = -1 EBADF (Bad file descriptor) [pid 7070] close(19) = -1 EBADF (Bad file descriptor) [pid 7070] close(20) = -1 EBADF (Bad file descriptor) [pid 7070] close(21) = -1 EBADF (Bad file descriptor) [pid 7070] close(22) = -1 EBADF (Bad file descriptor) [pid 7070] close(23) = -1 EBADF (Bad file descriptor) [pid 7070] close(24) = -1 EBADF (Bad file descriptor) [pid 7070] close(25) = -1 EBADF (Bad file descriptor) [pid 7070] close(26) = -1 EBADF (Bad file descriptor) [pid 7070] close(27) = -1 EBADF (Bad file descriptor) [pid 7070] close(28) = -1 EBADF (Bad file descriptor) [pid 7070] close(29) = -1 EBADF (Bad file descriptor) [pid 7070] exit_group(0) = ? [pid 7073] <... futex resumed>) = ? [pid 7071] <... futex resumed>) = ? [pid 7073] +++ exited with 0 +++ [pid 7071] +++ exited with 0 +++ [pid 7070] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2031, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./683", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./683", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./683/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./683/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./683/cgroup.cpu") = 0 [pid 5028] umount2("./683/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./683/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./683/binderfs") = 0 [pid 5028] umount2("./683/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./683/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./683/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./683/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./683/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./683/file0") = 0 [pid 5028] umount2("./683/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./683/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./683/cgroup") = 0 [pid 5028] umount2("./683/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./683/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./683/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./683") = 0 [pid 5028] mkdir("./684", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7074 attached , child_tidptr=0x5555563a5690) = 2034 [pid 7074] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7074] chdir("./684") = 0 [pid 7074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7074] setpgid(0, 0) = 0 [pid 7074] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7074] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7074] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7074] write(3, "1000", 4) = 4 [pid 7074] close(3) = 0 [pid 7074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7074] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7074] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7074] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7074] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7074] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7075 attached [pid 7075] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7075] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7074] <... clone3 resumed> => {parent_tid=[2035]}, 88) = 2035 [pid 7075] rt_sigprocmask(SIG_SETMASK, [], [pid 7074] rt_sigprocmask(SIG_SETMASK, [], [pid 7075] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7075] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7074] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7074] <... futex resumed>) = 0 [pid 7074] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7075] memfd_create("syzkaller", 0) = 3 [pid 7075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7075] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7075] munmap(0x7feef78ae000, 2097152) = 0 [pid 7075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7075] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7075] close(3) = 0 [pid 7075] mkdir("./file0", 0777) = 0 [pid 7075] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7075] chdir("./file0") = 0 [pid 7075] ioctl(4, LOOP_CLR_FD) = 0 [pid 7075] close(4) = 0 [pid 7075] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7075] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7074] <... futex resumed>) = 0 [pid 7075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7074] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7075] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7074] <... futex resumed>) = 0 [pid 7075] <... openat resumed>) = 4 [pid 7074] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7075] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7074] <... futex resumed>) = 0 [pid 7074] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7075] <... futex resumed>) = 1 [pid 7074] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7075] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7075] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7074] <... futex resumed>) = 0 [pid 7074] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7075] <... futex resumed>) = 1 [pid 7074] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 222.945926][ T7075] loop0: detected capacity change from 0 to 4096 [ 222.955168][ T7075] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 222.987494][ T7075] ntfs: volume version 3.1. [pid 7075] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7074] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7074] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7074] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7074] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7074] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7074] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7074] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7076 attached [pid 7076] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7074] <... clone3 resumed> => {parent_tid=[2036]}, 88) = 2036 [pid 7076] <... rseq resumed>) = 0 [pid 7074] rt_sigprocmask(SIG_SETMASK, [], [pid 7076] set_robust_list(0x7feef7aad9a0, 24 [pid 7074] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7076] <... set_robust_list resumed>) = 0 [pid 7074] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7074] <... futex resumed>) = 0 [pid 7076] ftruncate(4, 0 [pid 7074] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7076] <... ftruncate resumed>) = 0 [pid 7075] <... write resumed>) = 1048064 [pid 7075] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7075] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7076] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7074] <... futex resumed>) = 0 [pid 7076] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7074] close(3) = 0 [pid 7074] close(4) = 0 [pid 7074] close(5) = 0 [pid 7074] close(6) = -1 EBADF (Bad file descriptor) [pid 7074] close(7) = -1 EBADF (Bad file descriptor) [pid 7074] close(8) = -1 EBADF (Bad file descriptor) [pid 7074] close(9) = -1 EBADF (Bad file descriptor) [pid 7074] close(10) = -1 EBADF (Bad file descriptor) [pid 7074] close(11) = -1 EBADF (Bad file descriptor) [pid 7074] close(12) = -1 EBADF (Bad file descriptor) [pid 7074] close(13) = -1 EBADF (Bad file descriptor) [pid 7074] close(14) = -1 EBADF (Bad file descriptor) [pid 7074] close(15) = -1 EBADF (Bad file descriptor) [pid 7074] close(16) = -1 EBADF (Bad file descriptor) [pid 7074] close(17) = -1 EBADF (Bad file descriptor) [pid 7074] close(18) = -1 EBADF (Bad file descriptor) [pid 7074] close(19) = -1 EBADF (Bad file descriptor) [pid 7074] close(20) = -1 EBADF (Bad file descriptor) [pid 7074] close(21) = -1 EBADF (Bad file descriptor) [pid 7074] close(22) = -1 EBADF (Bad file descriptor) [pid 7074] close(23) = -1 EBADF (Bad file descriptor) [pid 7074] close(24) = -1 EBADF (Bad file descriptor) [pid 7074] close(25) = -1 EBADF (Bad file descriptor) [pid 7074] close(26) = -1 EBADF (Bad file descriptor) [pid 7074] close(27) = -1 EBADF (Bad file descriptor) [pid 7074] close(28) = -1 EBADF (Bad file descriptor) [pid 7074] close(29) = -1 EBADF (Bad file descriptor) [pid 7074] exit_group(0 [pid 7075] <... futex resumed>) = ? [pid 7074] <... exit_group resumed>) = ? [pid 7076] <... futex resumed>) = ? [pid 7075] +++ exited with 0 +++ [pid 7076] +++ exited with 0 +++ [pid 7074] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2034, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./684", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./684", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./684/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./684/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./684/cgroup.cpu") = 0 [pid 5028] umount2("./684/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./684/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./684/binderfs") = 0 [pid 5028] umount2("./684/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./684/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./684/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./684/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./684/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./684/file0") = 0 [pid 5028] umount2("./684/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./684/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./684/cgroup") = 0 [pid 5028] umount2("./684/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./684/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./684/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./684") = 0 [pid 5028] mkdir("./685", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7077 attached [pid 7077] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7077] chdir("./685") = 0 [pid 7077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7077] setpgid(0, 0) = 0 [pid 7077] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2037 [pid 7077] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7077] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7077] write(3, "1000", 4) = 4 [pid 7077] close(3) = 0 [pid 7077] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7077] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7077] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7077] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7077] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7077] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7078 attached => {parent_tid=[2038]}, 88) = 2038 [pid 7078] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7077] rt_sigprocmask(SIG_SETMASK, [], [pid 7078] <... rseq resumed>) = 0 [pid 7077] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7078] set_robust_list(0x7feeffcce9a0, 24 [pid 7077] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7078] <... set_robust_list resumed>) = 0 [pid 7078] rt_sigprocmask(SIG_SETMASK, [], [pid 7077] <... futex resumed>) = 0 [pid 7077] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7078] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7078] memfd_create("syzkaller", 0) = 3 [pid 7078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7078] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7078] munmap(0x7feef78ae000, 2097152) = 0 [pid 7078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7078] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7078] close(3) = 0 [pid 7078] mkdir("./file0", 0777) = 0 [pid 7078] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7078] chdir("./file0") = 0 [pid 7078] ioctl(4, LOOP_CLR_FD) = 0 [pid 7078] close(4) = 0 [pid 7078] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7078] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7077] <... futex resumed>) = 0 [pid 7077] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7078] <... futex resumed>) = 0 [pid 7077] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7078] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7078] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7077] <... futex resumed>) = 0 [pid 7078] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7077] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7078] <... openat resumed>) = 5 [pid 7077] <... futex resumed>) = 0 [pid 7078] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7077] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7078] <... futex resumed>) = 0 [pid 7077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7078] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7077] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7077] <... futex resumed>) = 0 [pid 7078] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 223.182107][ T7078] loop0: detected capacity change from 0 to 4096 [ 223.191376][ T7078] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 223.223819][ T7078] ntfs: volume version 3.1. [pid 7077] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7077] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7077] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7077] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7077] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2039]}, 88) = 2039 ./strace-static-x86_64: Process 7079 attached [pid 7077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7077] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7077] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7079] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7079] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7079] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7079] ftruncate(4, 0) = 0 [pid 7079] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7078] <... write resumed>) = 1048064 [pid 7079] <... futex resumed>) = 1 [pid 7078] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7077] <... futex resumed>) = 0 [pid 7079] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7078] <... futex resumed>) = 0 [pid 7078] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7077] close(3) = 0 [pid 7077] close(4) = 0 [pid 7077] close(5) = 0 [pid 7077] close(6) = -1 EBADF (Bad file descriptor) [pid 7077] close(7) = -1 EBADF (Bad file descriptor) [pid 7077] close(8) = -1 EBADF (Bad file descriptor) [pid 7077] close(9) = -1 EBADF (Bad file descriptor) [pid 7077] close(10) = -1 EBADF (Bad file descriptor) [pid 7077] close(11) = -1 EBADF (Bad file descriptor) [pid 7077] close(12) = -1 EBADF (Bad file descriptor) [pid 7077] close(13) = -1 EBADF (Bad file descriptor) [pid 7077] close(14) = -1 EBADF (Bad file descriptor) [pid 7077] close(15) = -1 EBADF (Bad file descriptor) [pid 7077] close(16) = -1 EBADF (Bad file descriptor) [pid 7077] close(17) = -1 EBADF (Bad file descriptor) [pid 7077] close(18) = -1 EBADF (Bad file descriptor) [pid 7077] close(19) = -1 EBADF (Bad file descriptor) [pid 7077] close(20) = -1 EBADF (Bad file descriptor) [pid 7077] close(21) = -1 EBADF (Bad file descriptor) [pid 7077] close(22) = -1 EBADF (Bad file descriptor) [pid 7077] close(23) = -1 EBADF (Bad file descriptor) [pid 7077] close(24) = -1 EBADF (Bad file descriptor) [pid 7077] close(25) = -1 EBADF (Bad file descriptor) [pid 7077] close(26) = -1 EBADF (Bad file descriptor) [pid 7077] close(27) = -1 EBADF (Bad file descriptor) [pid 7077] close(28) = -1 EBADF (Bad file descriptor) [pid 7077] close(29) = -1 EBADF (Bad file descriptor) [pid 7077] exit_group(0 [pid 7078] <... futex resumed>) = ? [pid 7079] <... futex resumed>) = ? [pid 7077] <... exit_group resumed>) = ? [pid 7079] +++ exited with 0 +++ [pid 7078] +++ exited with 0 +++ [pid 7077] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2037, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./685", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./685", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./685/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./685/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./685/cgroup.cpu") = 0 [pid 5028] umount2("./685/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./685/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./685/binderfs") = 0 [pid 5028] umount2("./685/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./685/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./685/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./685/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./685/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./685/file0") = 0 [pid 5028] umount2("./685/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./685/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./685/cgroup") = 0 [pid 5028] umount2("./685/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./685/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./685/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./685") = 0 [pid 5028] mkdir("./686", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7081 attached , child_tidptr=0x5555563a5690) = 2040 [pid 7081] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7081] chdir("./686") = 0 [pid 7081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7081] setpgid(0, 0) = 0 [pid 7081] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7081] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7081] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7081] write(3, "1000", 4) = 4 [pid 7081] close(3) = 0 [pid 7081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7081] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7081] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7081] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7081] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7081] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7081] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2041]}, 88) = 2041 [pid 7081] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7081] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7081] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7082 attached [pid 7082] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7082] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7082] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7082] memfd_create("syzkaller", 0) = 3 [pid 7082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7082] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7082] munmap(0x7feef78ae000, 2097152) = 0 [pid 7082] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7082] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7082] close(3) = 0 [pid 7082] mkdir("./file0", 0777) = 0 [pid 7082] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7082] chdir("./file0") = 0 [pid 7082] ioctl(4, LOOP_CLR_FD) = 0 [pid 7082] close(4) = 0 [pid 7082] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7081] <... futex resumed>) = 0 [pid 7082] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7081] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7081] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7082] <... openat resumed>) = 4 [pid 7082] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7081] <... futex resumed>) = 0 [pid 7082] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7081] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7082] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7081] <... futex resumed>) = 0 [pid 7082] <... openat resumed>) = 5 [pid 7081] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7082] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7081] <... futex resumed>) = 0 [pid 7082] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7081] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7082] <... futex resumed>) = 0 [pid 7081] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 223.440540][ T7082] loop0: detected capacity change from 0 to 4096 [ 223.449340][ T7082] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 223.480577][ T7082] ntfs: volume version 3.1. [pid 7082] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7081] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7081] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7081] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7081] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7083 attached [pid 7083] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7081] <... clone3 resumed> => {parent_tid=[2042]}, 88) = 2042 [pid 7081] rt_sigprocmask(SIG_SETMASK, [], [pid 7083] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7081] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7081] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7083] ftruncate(4, 0 [pid 7081] <... futex resumed>) = 0 [pid 7081] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7083] <... ftruncate resumed>) = 0 [pid 7082] <... write resumed>) = 1048064 [pid 7083] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7081] <... futex resumed>) = 0 [pid 7083] <... futex resumed>) = 1 [pid 7083] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7082] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7082] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7081] close(3) = 0 [pid 7081] close(4) = 0 [pid 7081] close(5) = 0 [pid 7081] close(6) = -1 EBADF (Bad file descriptor) [pid 7081] close(7) = -1 EBADF (Bad file descriptor) [pid 7081] close(8) = -1 EBADF (Bad file descriptor) [pid 7081] close(9) = -1 EBADF (Bad file descriptor) [pid 7081] close(10) = -1 EBADF (Bad file descriptor) [pid 7081] close(11) = -1 EBADF (Bad file descriptor) [pid 7081] close(12) = -1 EBADF (Bad file descriptor) [pid 7081] close(13) = -1 EBADF (Bad file descriptor) [pid 7081] close(14) = -1 EBADF (Bad file descriptor) [pid 7081] close(15) = -1 EBADF (Bad file descriptor) [pid 7081] close(16) = -1 EBADF (Bad file descriptor) [pid 7081] close(17) = -1 EBADF (Bad file descriptor) [pid 7081] close(18) = -1 EBADF (Bad file descriptor) [pid 7081] close(19) = -1 EBADF (Bad file descriptor) [pid 7081] close(20) = -1 EBADF (Bad file descriptor) [pid 7081] close(21) = -1 EBADF (Bad file descriptor) [pid 7081] close(22) = -1 EBADF (Bad file descriptor) [pid 7081] close(23) = -1 EBADF (Bad file descriptor) [pid 7081] close(24) = -1 EBADF (Bad file descriptor) [pid 7081] close(25) = -1 EBADF (Bad file descriptor) [pid 7081] close(26) = -1 EBADF (Bad file descriptor) [pid 7081] close(27) = -1 EBADF (Bad file descriptor) [pid 7081] close(28) = -1 EBADF (Bad file descriptor) [pid 7081] close(29) = -1 EBADF (Bad file descriptor) [pid 7081] exit_group(0) = ? [pid 7083] <... futex resumed>) = ? [pid 7082] <... futex resumed>) = ? [pid 7083] +++ exited with 0 +++ [pid 7082] +++ exited with 0 +++ [pid 7081] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2040, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./686", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./686", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./686/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./686/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./686/cgroup.cpu") = 0 [pid 5028] umount2("./686/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./686/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./686/binderfs") = 0 [pid 5028] umount2("./686/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./686/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./686/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./686/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./686/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./686/file0") = 0 [pid 5028] umount2("./686/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./686/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./686/cgroup") = 0 [pid 5028] umount2("./686/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./686/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./686/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./686") = 0 [pid 5028] mkdir("./687", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7084 attached , child_tidptr=0x5555563a5690) = 2043 [pid 7084] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7084] chdir("./687") = 0 [pid 7084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7084] setpgid(0, 0) = 0 [pid 7084] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7084] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7084] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7084] write(3, "1000", 4) = 4 [pid 7084] close(3) = 0 [pid 7084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7084] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7084] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7084] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7084] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7084] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7085 attached [pid 7085] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7085] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7085] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7085] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7084] <... clone3 resumed> => {parent_tid=[2044]}, 88) = 2044 [pid 7084] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7084] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... futex resumed>) = 0 [pid 7084] <... futex resumed>) = 1 [pid 7085] memfd_create("syzkaller", 0 [pid 7084] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7085] <... memfd_create resumed>) = 3 [pid 7085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7085] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7085] munmap(0x7feef78ae000, 2097152) = 0 [pid 7085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7085] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7085] close(3) = 0 [pid 7085] mkdir("./file0", 0777) = 0 [pid 7085] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7085] chdir("./file0") = 0 [pid 7085] ioctl(4, LOOP_CLR_FD) = 0 [pid 7085] close(4) = 0 [pid 7085] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7084] <... futex resumed>) = 0 [pid 7085] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7084] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7084] <... futex resumed>) = 0 [pid 7085] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7084] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7085] <... openat resumed>) = 4 [pid 7085] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7084] <... futex resumed>) = 0 [pid 7085] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7084] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... futex resumed>) = 0 [pid 7084] <... futex resumed>) = 1 [pid 7085] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7084] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7085] <... openat resumed>) = 5 [pid 7085] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7084] <... futex resumed>) = 0 [pid 7085] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7084] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7084] <... futex resumed>) = 0 [pid 7085] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 223.675193][ T7085] loop0: detected capacity change from 0 to 4096 [ 223.697514][ T7085] ntfs: volume version 3.1. [pid 7084] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7084] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7084] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7084] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7086 attached => {parent_tid=[2045]}, 88) = 2045 [pid 7086] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7084] rt_sigprocmask(SIG_SETMASK, [], [pid 7086] <... rseq resumed>) = 0 [pid 7084] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7086] set_robust_list(0x7feef7aad9a0, 24 [pid 7084] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7086] <... set_robust_list resumed>) = 0 [pid 7086] rt_sigprocmask(SIG_SETMASK, [], [pid 7084] <... futex resumed>) = 0 [pid 7084] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7086] ftruncate(4, 0) = 0 [pid 7086] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7085] <... write resumed>) = 1048064 [pid 7086] <... futex resumed>) = 1 [pid 7085] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7086] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7085] <... futex resumed>) = 0 [pid 7084] <... futex resumed>) = 0 [pid 7085] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7084] close(3) = 0 [pid 7084] close(4) = 0 [pid 7084] close(5) = 0 [pid 7084] close(6) = -1 EBADF (Bad file descriptor) [pid 7084] close(7) = -1 EBADF (Bad file descriptor) [pid 7084] close(8) = -1 EBADF (Bad file descriptor) [pid 7084] close(9) = -1 EBADF (Bad file descriptor) [pid 7084] close(10) = -1 EBADF (Bad file descriptor) [pid 7084] close(11) = -1 EBADF (Bad file descriptor) [pid 7084] close(12) = -1 EBADF (Bad file descriptor) [pid 7084] close(13) = -1 EBADF (Bad file descriptor) [pid 7084] close(14) = -1 EBADF (Bad file descriptor) [pid 7084] close(15) = -1 EBADF (Bad file descriptor) [pid 7084] close(16) = -1 EBADF (Bad file descriptor) [pid 7084] close(17) = -1 EBADF (Bad file descriptor) [pid 7084] close(18) = -1 EBADF (Bad file descriptor) [pid 7084] close(19) = -1 EBADF (Bad file descriptor) [pid 7084] close(20) = -1 EBADF (Bad file descriptor) [pid 7084] close(21) = -1 EBADF (Bad file descriptor) [pid 7084] close(22) = -1 EBADF (Bad file descriptor) [pid 7084] close(23) = -1 EBADF (Bad file descriptor) [pid 7084] close(24) = -1 EBADF (Bad file descriptor) [pid 7084] close(25) = -1 EBADF (Bad file descriptor) [pid 7084] close(26) = -1 EBADF (Bad file descriptor) [pid 7084] close(27) = -1 EBADF (Bad file descriptor) [pid 7084] close(28) = -1 EBADF (Bad file descriptor) [pid 7084] close(29) = -1 EBADF (Bad file descriptor) [pid 7084] exit_group(0) = ? [pid 7085] <... futex resumed>) = ? [pid 7086] <... futex resumed>) = ? [pid 7085] +++ exited with 0 +++ [pid 7086] +++ exited with 0 +++ [pid 7084] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2043, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./687", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./687", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./687/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./687/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./687/cgroup.cpu") = 0 [pid 5028] umount2("./687/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./687/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./687/binderfs") = 0 [pid 5028] umount2("./687/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./687/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./687/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./687/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./687/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./687/file0") = 0 [pid 5028] umount2("./687/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./687/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./687/cgroup") = 0 [pid 5028] umount2("./687/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./687/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./687/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./687") = 0 [pid 5028] mkdir("./688", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7087 attached , child_tidptr=0x5555563a5690) = 2046 [pid 7087] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7087] chdir("./688") = 0 [pid 7087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7087] setpgid(0, 0) = 0 [pid 7087] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7087] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7087] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7087] write(3, "1000", 4) = 4 [pid 7087] close(3) = 0 [pid 7087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7087] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7087] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7087] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7087] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7088 attached [pid 7088] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7087] <... clone3 resumed> => {parent_tid=[2047]}, 88) = 2047 [pid 7087] rt_sigprocmask(SIG_SETMASK, [], [pid 7088] <... rseq resumed>) = 0 [pid 7087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7088] set_robust_list(0x7feeffcce9a0, 24 [pid 7087] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] <... set_robust_list resumed>) = 0 [pid 7087] <... futex resumed>) = 0 [pid 7088] rt_sigprocmask(SIG_SETMASK, [], [pid 7087] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7088] memfd_create("syzkaller", 0) = 3 [pid 7088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7088] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7088] munmap(0x7feef78ae000, 2097152) = 0 [pid 7088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7088] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7088] close(3) = 0 [pid 7088] mkdir("./file0", 0777) = 0 [pid 7088] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7088] chdir("./file0") = 0 [pid 7088] ioctl(4, LOOP_CLR_FD) = 0 [pid 7088] close(4) = 0 [pid 7088] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7087] <... futex resumed>) = 0 [pid 7088] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7087] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7087] <... futex resumed>) = 0 [pid 7088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7087] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7088] <... openat resumed>) = 4 [pid 7088] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7088] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7087] <... futex resumed>) = 0 [pid 7087] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7088] <... futex resumed>) = 0 [pid 7087] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7088] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7087] <... futex resumed>) = 0 [pid 7088] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7087] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7087] <... futex resumed>) = 0 [pid 7088] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 223.904941][ T7088] loop0: detected capacity change from 0 to 4096 [ 223.926768][ T7088] ntfs: volume version 3.1. [pid 7087] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7087] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7087] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7089 attached [pid 7089] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7087] <... clone3 resumed> => {parent_tid=[2048]}, 88) = 2048 [pid 7089] set_robust_list(0x7feef7aad9a0, 24 [pid 7087] rt_sigprocmask(SIG_SETMASK, [], [pid 7089] <... set_robust_list resumed>) = 0 [pid 7089] rt_sigprocmask(SIG_SETMASK, [], [pid 7087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7087] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7089] ftruncate(4, 0 [pid 7087] <... futex resumed>) = 0 [pid 7089] <... ftruncate resumed>) = 0 [pid 7087] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7089] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7088] <... write resumed>) = 1048064 [pid 7087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7088] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7089] <... futex resumed>) = 0 [pid 7088] <... futex resumed>) = 0 [pid 7089] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7087] close(3 [pid 7088] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7087] <... close resumed>) = 0 [pid 7087] close(4) = 0 [pid 7087] close(5) = 0 [pid 7087] close(6) = -1 EBADF (Bad file descriptor) [pid 7087] close(7) = -1 EBADF (Bad file descriptor) [pid 7087] close(8) = -1 EBADF (Bad file descriptor) [pid 7087] close(9) = -1 EBADF (Bad file descriptor) [pid 7087] close(10) = -1 EBADF (Bad file descriptor) [pid 7087] close(11) = -1 EBADF (Bad file descriptor) [pid 7087] close(12) = -1 EBADF (Bad file descriptor) [pid 7087] close(13) = -1 EBADF (Bad file descriptor) [pid 7087] close(14) = -1 EBADF (Bad file descriptor) [pid 7087] close(15) = -1 EBADF (Bad file descriptor) [pid 7087] close(16) = -1 EBADF (Bad file descriptor) [pid 7087] close(17) = -1 EBADF (Bad file descriptor) [pid 7087] close(18) = -1 EBADF (Bad file descriptor) [pid 7087] close(19) = -1 EBADF (Bad file descriptor) [pid 7087] close(20) = -1 EBADF (Bad file descriptor) [pid 7087] close(21) = -1 EBADF (Bad file descriptor) [pid 7087] close(22) = -1 EBADF (Bad file descriptor) [pid 7087] close(23) = -1 EBADF (Bad file descriptor) [pid 7087] close(24) = -1 EBADF (Bad file descriptor) [pid 7087] close(25) = -1 EBADF (Bad file descriptor) [pid 7087] close(26) = -1 EBADF (Bad file descriptor) [pid 7087] close(27) = -1 EBADF (Bad file descriptor) [pid 7087] close(28) = -1 EBADF (Bad file descriptor) [pid 7087] close(29) = -1 EBADF (Bad file descriptor) [pid 7087] exit_group(0) = ? [pid 7088] <... futex resumed>) = ? [pid 7089] <... futex resumed>) = ? [pid 7088] +++ exited with 0 +++ [pid 7089] +++ exited with 0 +++ [pid 7087] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2046, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./688", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./688", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./688/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./688/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./688/cgroup.cpu") = 0 [pid 5028] umount2("./688/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./688/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./688/binderfs") = 0 [pid 5028] umount2("./688/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./688/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./688/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./688/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./688/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./688/file0") = 0 [pid 5028] umount2("./688/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./688/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./688/cgroup") = 0 [pid 5028] umount2("./688/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./688/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./688/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./688") = 0 [pid 5028] mkdir("./689", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7090 attached , child_tidptr=0x5555563a5690) = 2049 [pid 7090] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7090] chdir("./689") = 0 [pid 7090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7090] setpgid(0, 0) = 0 [pid 7090] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7090] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7090] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7090] write(3, "1000", 4) = 4 [pid 7090] close(3) = 0 [pid 7090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7090] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7090] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7090] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7091 attached => {parent_tid=[2050]}, 88) = 2050 [pid 7090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7090] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7090] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7091] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7091] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7091] memfd_create("syzkaller", 0) = 3 [pid 7091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7091] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7091] munmap(0x7feef78ae000, 2097152) = 0 [pid 7091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7091] close(3) = 0 [pid 7091] mkdir("./file0", 0777) = 0 [pid 7091] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7091] chdir("./file0") = 0 [pid 7091] ioctl(4, LOOP_CLR_FD) = 0 [pid 7091] close(4) = 0 [pid 7091] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7090] <... futex resumed>) = 0 [pid 7091] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7090] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7091] <... futex resumed>) = 0 [pid 7090] <... futex resumed>) = 1 [pid 7091] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7090] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7091] <... openat resumed>) = 4 [pid 7091] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7091] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7090] <... futex resumed>) = 0 [pid 7090] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7091] <... futex resumed>) = 0 [pid 7091] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7091] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7091] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7090] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7090] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7091] <... futex resumed>) = 0 [pid 7091] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 224.125519][ T7091] loop0: detected capacity change from 0 to 4096 [ 224.146978][ T7091] ntfs: volume version 3.1. [pid 7090] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7090] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7090] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7092 attached [pid 7092] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7090] <... clone3 resumed> => {parent_tid=[2051]}, 88) = 2051 [pid 7092] set_robust_list(0x7feef7aad9a0, 24 [pid 7090] rt_sigprocmask(SIG_SETMASK, [], [pid 7092] <... set_robust_list resumed>) = 0 [pid 7090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7092] rt_sigprocmask(SIG_SETMASK, [], [pid 7090] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7090] <... futex resumed>) = 0 [pid 7091] <... write resumed>) = 1048064 [pid 7092] ftruncate(4, 0 [pid 7091] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7090] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7091] <... futex resumed>) = 0 [pid 7091] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7092] <... ftruncate resumed>) = 0 [pid 7092] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7090] <... futex resumed>) = 0 [pid 7092] <... futex resumed>) = 1 [pid 7090] close(3 [pid 7092] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7090] <... close resumed>) = 0 [pid 7090] close(4) = 0 [pid 7090] close(5) = 0 [pid 7090] close(6) = -1 EBADF (Bad file descriptor) [pid 7090] close(7) = -1 EBADF (Bad file descriptor) [pid 7090] close(8) = -1 EBADF (Bad file descriptor) [pid 7090] close(9) = -1 EBADF (Bad file descriptor) [pid 7090] close(10) = -1 EBADF (Bad file descriptor) [pid 7090] close(11) = -1 EBADF (Bad file descriptor) [pid 7090] close(12) = -1 EBADF (Bad file descriptor) [pid 7090] close(13) = -1 EBADF (Bad file descriptor) [pid 7090] close(14) = -1 EBADF (Bad file descriptor) [pid 7090] close(15) = -1 EBADF (Bad file descriptor) [pid 7090] close(16) = -1 EBADF (Bad file descriptor) [pid 7090] close(17) = -1 EBADF (Bad file descriptor) [pid 7090] close(18) = -1 EBADF (Bad file descriptor) [pid 7090] close(19) = -1 EBADF (Bad file descriptor) [pid 7090] close(20) = -1 EBADF (Bad file descriptor) [pid 7090] close(21) = -1 EBADF (Bad file descriptor) [pid 7090] close(22) = -1 EBADF (Bad file descriptor) [pid 7090] close(23) = -1 EBADF (Bad file descriptor) [pid 7090] close(24) = -1 EBADF (Bad file descriptor) [pid 7090] close(25) = -1 EBADF (Bad file descriptor) [pid 7090] close(26) = -1 EBADF (Bad file descriptor) [pid 7090] close(27) = -1 EBADF (Bad file descriptor) [pid 7090] close(28) = -1 EBADF (Bad file descriptor) [pid 7090] close(29) = -1 EBADF (Bad file descriptor) [pid 7090] exit_group(0 [pid 7092] <... futex resumed>) = ? [pid 7091] <... futex resumed>) = ? [pid 7092] +++ exited with 0 +++ [pid 7090] <... exit_group resumed>) = ? [pid 7091] +++ exited with 0 +++ [pid 7090] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2049, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./689", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./689", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./689/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./689/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./689/cgroup.cpu") = 0 [pid 5028] umount2("./689/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./689/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./689/binderfs") = 0 [pid 5028] umount2("./689/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./689/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./689/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./689/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./689/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./689/file0") = 0 [pid 5028] umount2("./689/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./689/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./689/cgroup") = 0 [pid 5028] umount2("./689/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./689/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./689/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./689") = 0 [pid 5028] mkdir("./690", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2052 ./strace-static-x86_64: Process 7093 attached [pid 7093] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7093] chdir("./690") = 0 [pid 7093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7093] setpgid(0, 0) = 0 [pid 7093] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7093] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7093] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7093] write(3, "1000", 4) = 4 [pid 7093] close(3) = 0 [pid 7093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7093] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7093] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7093] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7093] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7093] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7093] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7094 attached [pid 7094] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7093] <... clone3 resumed> => {parent_tid=[2053]}, 88) = 2053 [pid 7094] <... rseq resumed>) = 0 [pid 7094] set_robust_list(0x7feeffcce9a0, 24 [pid 7093] rt_sigprocmask(SIG_SETMASK, [], [pid 7094] <... set_robust_list resumed>) = 0 [pid 7094] rt_sigprocmask(SIG_SETMASK, [], [pid 7093] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7094] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7094] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7093] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7093] <... futex resumed>) = 0 [pid 7093] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7094] memfd_create("syzkaller", 0) = 3 [pid 7094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7094] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7094] munmap(0x7feef78ae000, 2097152) = 0 [pid 7094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7094] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7094] close(3) = 0 [pid 7094] mkdir("./file0", 0777) = 0 [pid 7094] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7094] chdir("./file0") = 0 [pid 7094] ioctl(4, LOOP_CLR_FD) = 0 [pid 7094] close(4) = 0 [pid 7094] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7094] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7093] <... futex resumed>) = 0 [pid 7093] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] <... futex resumed>) = 0 [pid 7093] <... futex resumed>) = 1 [pid 7094] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7093] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7094] <... openat resumed>) = 4 [pid 7094] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7093] <... futex resumed>) = 0 [pid 7094] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7093] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7093] <... futex resumed>) = 0 [pid 7094] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7093] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7094] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7094] <... futex resumed>) = 0 [pid 7093] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7093] <... futex resumed>) = 0 [ 224.342975][ T7094] loop0: detected capacity change from 0 to 4096 [ 224.362571][ T7094] ntfs: volume version 3.1. [pid 7093] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7093] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7093] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7093] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7093] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2054]}, 88) = 2054 [pid 7093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7095 attached [pid 7093] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7095] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7093] <... futex resumed>) = 0 [pid 7095] <... rseq resumed>) = 0 [pid 7095] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7093] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7095] ftruncate(4, 0) = 0 [pid 7095] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7094] <... write resumed>) = 1048064 [pid 7095] <... futex resumed>) = 1 [pid 7093] <... futex resumed>) = 0 [pid 7095] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7094] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7093] close(3 [pid 7094] <... futex resumed>) = 0 [pid 7094] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7093] <... close resumed>) = 0 [pid 7093] close(4) = 0 [pid 7093] close(5) = 0 [pid 7093] close(6) = -1 EBADF (Bad file descriptor) [pid 7093] close(7) = -1 EBADF (Bad file descriptor) [pid 7093] close(8) = -1 EBADF (Bad file descriptor) [pid 7093] close(9) = -1 EBADF (Bad file descriptor) [pid 7093] close(10) = -1 EBADF (Bad file descriptor) [pid 7093] close(11) = -1 EBADF (Bad file descriptor) [pid 7093] close(12) = -1 EBADF (Bad file descriptor) [pid 7093] close(13) = -1 EBADF (Bad file descriptor) [pid 7093] close(14) = -1 EBADF (Bad file descriptor) [pid 7093] close(15) = -1 EBADF (Bad file descriptor) [pid 7093] close(16) = -1 EBADF (Bad file descriptor) [pid 7093] close(17) = -1 EBADF (Bad file descriptor) [pid 7093] close(18) = -1 EBADF (Bad file descriptor) [pid 7093] close(19) = -1 EBADF (Bad file descriptor) [pid 7093] close(20) = -1 EBADF (Bad file descriptor) [pid 7093] close(21) = -1 EBADF (Bad file descriptor) [pid 7093] close(22) = -1 EBADF (Bad file descriptor) [pid 7093] close(23) = -1 EBADF (Bad file descriptor) [pid 7093] close(24) = -1 EBADF (Bad file descriptor) [pid 7093] close(25) = -1 EBADF (Bad file descriptor) [pid 7093] close(26) = -1 EBADF (Bad file descriptor) [pid 7093] close(27) = -1 EBADF (Bad file descriptor) [pid 7093] close(28) = -1 EBADF (Bad file descriptor) [pid 7093] close(29) = -1 EBADF (Bad file descriptor) [pid 7093] exit_group(0 [pid 7095] <... futex resumed>) = ? [pid 7094] <... futex resumed>) = ? [pid 7094] +++ exited with 0 +++ [pid 7093] <... exit_group resumed>) = ? [pid 7095] +++ exited with 0 +++ [pid 7093] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2052, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./690", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./690", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./690/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./690/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./690/cgroup.cpu") = 0 [pid 5028] umount2("./690/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./690/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./690/binderfs") = 0 [pid 5028] umount2("./690/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./690/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./690/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./690/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./690/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./690/file0") = 0 [pid 5028] umount2("./690/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./690/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./690/cgroup") = 0 [pid 5028] umount2("./690/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./690/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./690/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./690") = 0 [pid 5028] mkdir("./691", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7096 attached , child_tidptr=0x5555563a5690) = 2055 [pid 7096] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7096] chdir("./691") = 0 [pid 7096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7096] setpgid(0, 0) = 0 [pid 7096] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7096] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7096] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7096] write(3, "1000", 4) = 4 [pid 7096] close(3) = 0 [pid 7096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7096] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7096] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7096] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7096] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7096] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7096] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7096] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7097 attached [pid 7097] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7096] <... clone3 resumed> => {parent_tid=[2056]}, 88) = 2056 [pid 7097] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7097] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7097] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7096] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7097] <... futex resumed>) = 0 [pid 7096] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7097] memfd_create("syzkaller", 0) = 3 [pid 7097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7097] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7097] munmap(0x7feef78ae000, 2097152) = 0 [pid 7097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7097] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7097] close(3) = 0 [pid 7097] mkdir("./file0", 0777) = 0 [pid 7097] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7097] chdir("./file0") = 0 [pid 7097] ioctl(4, LOOP_CLR_FD) = 0 [pid 7097] close(4) = 0 [pid 7097] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7097] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7096] <... futex resumed>) = 0 [pid 7096] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7097] <... futex resumed>) = 0 [pid 7096] <... futex resumed>) = 1 [pid 7097] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7096] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7097] <... openat resumed>) = 4 [pid 7097] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7096] <... futex resumed>) = 0 [pid 7097] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7096] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7097] <... futex resumed>) = 0 [pid 7096] <... futex resumed>) = 1 [pid 7097] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7096] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7097] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7097] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7096] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7096] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 224.583086][ T7097] loop0: detected capacity change from 0 to 4096 [ 224.603332][ T7097] ntfs: volume version 3.1. [pid 7097] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7096] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7096] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7096] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7096] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7096] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7096] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7096] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7098 attached [pid 7098] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7096] <... clone3 resumed> => {parent_tid=[2057]}, 88) = 2057 [pid 7096] rt_sigprocmask(SIG_SETMASK, [], [pid 7098] <... rseq resumed>) = 0 [pid 7098] set_robust_list(0x7feef7aad9a0, 24 [pid 7096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7098] <... set_robust_list resumed>) = 0 [pid 7096] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7098] rt_sigprocmask(SIG_SETMASK, [], [pid 7096] <... futex resumed>) = 0 [pid 7098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7096] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7098] ftruncate(4, 0) = 0 [pid 7098] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7098] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7096] <... futex resumed>) = 0 [pid 7097] <... write resumed>) = 1048064 [pid 7097] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7097] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7096] close(3) = 0 [pid 7096] close(4) = 0 [pid 7096] close(5) = 0 [pid 7096] close(6) = -1 EBADF (Bad file descriptor) [pid 7096] close(7) = -1 EBADF (Bad file descriptor) [pid 7096] close(8) = -1 EBADF (Bad file descriptor) [pid 7096] close(9) = -1 EBADF (Bad file descriptor) [pid 7096] close(10) = -1 EBADF (Bad file descriptor) [pid 7096] close(11) = -1 EBADF (Bad file descriptor) [pid 7096] close(12) = -1 EBADF (Bad file descriptor) [pid 7096] close(13) = -1 EBADF (Bad file descriptor) [pid 7096] close(14) = -1 EBADF (Bad file descriptor) [pid 7096] close(15) = -1 EBADF (Bad file descriptor) [pid 7096] close(16) = -1 EBADF (Bad file descriptor) [pid 7096] close(17) = -1 EBADF (Bad file descriptor) [pid 7096] close(18) = -1 EBADF (Bad file descriptor) [pid 7096] close(19) = -1 EBADF (Bad file descriptor) [pid 7096] close(20) = -1 EBADF (Bad file descriptor) [pid 7096] close(21) = -1 EBADF (Bad file descriptor) [pid 7096] close(22) = -1 EBADF (Bad file descriptor) [pid 7096] close(23) = -1 EBADF (Bad file descriptor) [pid 7096] close(24) = -1 EBADF (Bad file descriptor) [pid 7096] close(25) = -1 EBADF (Bad file descriptor) [pid 7096] close(26) = -1 EBADF (Bad file descriptor) [pid 7096] close(27) = -1 EBADF (Bad file descriptor) [pid 7096] close(28) = -1 EBADF (Bad file descriptor) [pid 7096] close(29) = -1 EBADF (Bad file descriptor) [pid 7096] exit_group(0) = ? [pid 7098] <... futex resumed>) = ? [pid 7097] <... futex resumed>) = ? [pid 7098] +++ exited with 0 +++ [pid 7097] +++ exited with 0 +++ [pid 7096] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2055, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./691", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./691", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./691/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./691/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./691/cgroup.cpu") = 0 [pid 5028] umount2("./691/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./691/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./691/binderfs") = 0 [pid 5028] umount2("./691/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./691/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./691/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./691/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./691/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./691/file0") = 0 [pid 5028] umount2("./691/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./691/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./691/cgroup") = 0 [pid 5028] umount2("./691/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./691/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./691/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./691") = 0 [pid 5028] mkdir("./692", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7099 attached , child_tidptr=0x5555563a5690) = 2058 [pid 7099] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7099] chdir("./692") = 0 [pid 7099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7099] setpgid(0, 0) = 0 [pid 7099] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7099] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7099] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7099] write(3, "1000", 4) = 4 [pid 7099] close(3) = 0 [pid 7099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7099] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7099] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7099] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7099] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7100 attached => {parent_tid=[2059]}, 88) = 2059 [pid 7100] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7099] rt_sigprocmask(SIG_SETMASK, [], [pid 7100] <... rseq resumed>) = 0 [pid 7099] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7100] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7099] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7099] <... futex resumed>) = 0 [pid 7100] memfd_create("syzkaller", 0 [pid 7099] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7100] <... memfd_create resumed>) = 3 [pid 7100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7100] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7100] munmap(0x7feef78ae000, 2097152) = 0 [pid 7100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7100] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7100] close(3) = 0 [pid 7100] mkdir("./file0", 0777) = 0 [pid 7100] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7100] chdir("./file0") = 0 [pid 7100] ioctl(4, LOOP_CLR_FD) = 0 [pid 7100] close(4) = 0 [pid 7100] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7099] <... futex resumed>) = 0 [pid 7099] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7100] <... futex resumed>) = 1 [pid 7099] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7100] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7100] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7099] <... futex resumed>) = 0 [pid 7099] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7100] <... futex resumed>) = 1 [pid 7099] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7100] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7100] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7100] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7099] <... futex resumed>) = 0 [pid 7099] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7100] <... futex resumed>) = 0 [pid 7099] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 224.803889][ T7100] loop0: detected capacity change from 0 to 4096 [ 224.823461][ T7100] ntfs: volume version 3.1. [pid 7100] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7099] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7099] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7099] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7099] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7099] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7101 attached [pid 7101] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7099] <... clone3 resumed> => {parent_tid=[2060]}, 88) = 2060 [pid 7101] set_robust_list(0x7feef7aad9a0, 24 [pid 7099] rt_sigprocmask(SIG_SETMASK, [], [pid 7101] <... set_robust_list resumed>) = 0 [pid 7099] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7101] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7099] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7101] ftruncate(4, 0 [pid 7099] <... futex resumed>) = 0 [pid 7099] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7101] <... ftruncate resumed>) = 0 [pid 7101] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7100] <... write resumed>) = 1048064 [pid 7099] <... futex resumed>) = 0 [pid 7101] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7100] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7100] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7099] close(3) = 0 [pid 7099] close(4) = 0 [pid 7099] close(5) = 0 [pid 7099] close(6) = -1 EBADF (Bad file descriptor) [pid 7099] close(7) = -1 EBADF (Bad file descriptor) [pid 7099] close(8) = -1 EBADF (Bad file descriptor) [pid 7099] close(9) = -1 EBADF (Bad file descriptor) [pid 7099] close(10) = -1 EBADF (Bad file descriptor) [pid 7099] close(11) = -1 EBADF (Bad file descriptor) [pid 7099] close(12) = -1 EBADF (Bad file descriptor) [pid 7099] close(13) = -1 EBADF (Bad file descriptor) [pid 7099] close(14) = -1 EBADF (Bad file descriptor) [pid 7099] close(15) = -1 EBADF (Bad file descriptor) [pid 7099] close(16) = -1 EBADF (Bad file descriptor) [pid 7099] close(17) = -1 EBADF (Bad file descriptor) [pid 7099] close(18) = -1 EBADF (Bad file descriptor) [pid 7099] close(19) = -1 EBADF (Bad file descriptor) [pid 7099] close(20) = -1 EBADF (Bad file descriptor) [pid 7099] close(21) = -1 EBADF (Bad file descriptor) [pid 7099] close(22) = -1 EBADF (Bad file descriptor) [pid 7099] close(23) = -1 EBADF (Bad file descriptor) [pid 7099] close(24) = -1 EBADF (Bad file descriptor) [pid 7099] close(25) = -1 EBADF (Bad file descriptor) [pid 7099] close(26) = -1 EBADF (Bad file descriptor) [pid 7099] close(27) = -1 EBADF (Bad file descriptor) [pid 7099] close(28) = -1 EBADF (Bad file descriptor) [pid 7099] close(29) = -1 EBADF (Bad file descriptor) [pid 7099] exit_group(0 [pid 7101] <... futex resumed>) = ? [pid 7099] <... exit_group resumed>) = ? [pid 7100] <... futex resumed>) = ? [pid 7101] +++ exited with 0 +++ [pid 7100] +++ exited with 0 +++ [pid 7099] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2058, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./692", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./692", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./692/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./692/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./692/cgroup.cpu") = 0 [pid 5028] umount2("./692/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./692/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./692/binderfs") = 0 [pid 5028] umount2("./692/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./692/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./692/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./692/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./692/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./692/file0") = 0 [pid 5028] umount2("./692/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./692/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./692/cgroup") = 0 [pid 5028] umount2("./692/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./692/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./692/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./692") = 0 [pid 5028] mkdir("./693", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7102 attached , child_tidptr=0x5555563a5690) = 2061 [pid 7102] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7102] chdir("./693") = 0 [pid 7102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7102] setpgid(0, 0) = 0 [pid 7102] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7102] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7102] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7102] write(3, "1000", 4) = 4 [pid 7102] close(3) = 0 [pid 7102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7102] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7102] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7102] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7102] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7102] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7103 attached => {parent_tid=[2062]}, 88) = 2062 [pid 7103] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7102] rt_sigprocmask(SIG_SETMASK, [], [pid 7103] <... rseq resumed>) = 0 [pid 7102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7103] set_robust_list(0x7feeffcce9a0, 24 [pid 7102] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7103] <... set_robust_list resumed>) = 0 [pid 7103] rt_sigprocmask(SIG_SETMASK, [], [pid 7102] <... futex resumed>) = 0 [pid 7103] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7102] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7103] memfd_create("syzkaller", 0) = 3 [pid 7103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7103] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7103] munmap(0x7feef78ae000, 2097152) = 0 [pid 7103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7103] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7103] close(3) = 0 [pid 7103] mkdir("./file0", 0777) = 0 [pid 7103] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7103] chdir("./file0") = 0 [pid 7103] ioctl(4, LOOP_CLR_FD) = 0 [pid 7103] close(4) = 0 [pid 7103] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7102] <... futex resumed>) = 0 [pid 7102] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7103] <... futex resumed>) = 1 [pid 7103] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7102] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7103] <... openat resumed>) = 4 [pid 7103] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7102] <... futex resumed>) = 0 [pid 7103] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7102] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7103] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7102] <... futex resumed>) = 0 [pid 7103] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7102] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7103] <... futex resumed>) = 0 [pid 7102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7103] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7102] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7103] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7102] <... futex resumed>) = 0 [ 225.008977][ T7103] loop0: detected capacity change from 0 to 4096 [ 225.031352][ T7103] ntfs: volume version 3.1. [pid 7102] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7102] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7102] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7102] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7104 attached => {parent_tid=[2063]}, 88) = 2063 [pid 7104] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7102] rt_sigprocmask(SIG_SETMASK, [], [pid 7104] set_robust_list(0x7feef7aad9a0, 24 [pid 7102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7104] <... set_robust_list resumed>) = 0 [pid 7102] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7104] rt_sigprocmask(SIG_SETMASK, [], [pid 7102] <... futex resumed>) = 0 [pid 7104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7104] ftruncate(4, 0 [pid 7102] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7104] <... ftruncate resumed>) = 0 [pid 7103] <... write resumed>) = 1048064 [pid 7104] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7103] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7104] <... futex resumed>) = 1 [pid 7102] <... futex resumed>) = 0 [pid 7104] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7103] <... futex resumed>) = 0 [pid 7103] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7102] close(3) = 0 [pid 7102] close(4) = 0 [pid 7102] close(5) = 0 [pid 7102] close(6) = -1 EBADF (Bad file descriptor) [pid 7102] close(7) = -1 EBADF (Bad file descriptor) [pid 7102] close(8) = -1 EBADF (Bad file descriptor) [pid 7102] close(9) = -1 EBADF (Bad file descriptor) [pid 7102] close(10) = -1 EBADF (Bad file descriptor) [pid 7102] close(11) = -1 EBADF (Bad file descriptor) [pid 7102] close(12) = -1 EBADF (Bad file descriptor) [pid 7102] close(13) = -1 EBADF (Bad file descriptor) [pid 7102] close(14) = -1 EBADF (Bad file descriptor) [pid 7102] close(15) = -1 EBADF (Bad file descriptor) [pid 7102] close(16) = -1 EBADF (Bad file descriptor) [pid 7102] close(17) = -1 EBADF (Bad file descriptor) [pid 7102] close(18) = -1 EBADF (Bad file descriptor) [pid 7102] close(19) = -1 EBADF (Bad file descriptor) [pid 7102] close(20) = -1 EBADF (Bad file descriptor) [pid 7102] close(21) = -1 EBADF (Bad file descriptor) [pid 7102] close(22) = -1 EBADF (Bad file descriptor) [pid 7102] close(23) = -1 EBADF (Bad file descriptor) [pid 7102] close(24) = -1 EBADF (Bad file descriptor) [pid 7102] close(25) = -1 EBADF (Bad file descriptor) [pid 7102] close(26) = -1 EBADF (Bad file descriptor) [pid 7102] close(27) = -1 EBADF (Bad file descriptor) [pid 7102] close(28) = -1 EBADF (Bad file descriptor) [pid 7102] close(29) = -1 EBADF (Bad file descriptor) [pid 7102] exit_group(0 [pid 7103] <... futex resumed>) = ? [pid 7102] <... exit_group resumed>) = ? [pid 7104] <... futex resumed>) = ? [pid 7103] +++ exited with 0 +++ [pid 7104] +++ exited with 0 +++ [pid 7102] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2061, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./693", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./693", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./693/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./693/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./693/cgroup.cpu") = 0 [pid 5028] umount2("./693/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./693/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./693/binderfs") = 0 [pid 5028] umount2("./693/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./693/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./693/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./693/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./693/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./693/file0") = 0 [pid 5028] umount2("./693/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./693/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./693/cgroup") = 0 [pid 5028] umount2("./693/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./693/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./693/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./693") = 0 [pid 5028] mkdir("./694", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7105 attached , child_tidptr=0x5555563a5690) = 2064 [pid 7105] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7105] chdir("./694") = 0 [pid 7105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7105] setpgid(0, 0) = 0 [pid 7105] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7105] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7105] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7105] write(3, "1000", 4) = 4 [pid 7105] close(3) = 0 [pid 7105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7105] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7105] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7105] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7105] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7106 attached => {parent_tid=[2065]}, 88) = 2065 [pid 7106] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7106] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7106] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7105] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7106] <... futex resumed>) = 0 [pid 7106] memfd_create("syzkaller", 0 [pid 7105] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7106] <... memfd_create resumed>) = 3 [pid 7106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7106] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7106] munmap(0x7feef78ae000, 2097152) = 0 [pid 7106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7106] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7106] close(3) = 0 [pid 7106] mkdir("./file0", 0777) = 0 [pid 7106] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7106] chdir("./file0") = 0 [pid 7106] ioctl(4, LOOP_CLR_FD) = 0 [pid 7106] close(4) = 0 [pid 7106] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7105] <... futex resumed>) = 0 [pid 7105] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7106] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7106] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7105] <... futex resumed>) = 0 [pid 7106] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7105] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7106] <... openat resumed>) = 5 [pid 7105] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7106] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7105] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7106] <... futex resumed>) = 0 [pid 7106] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7106] <... futex resumed>) = 0 [pid 7105] <... futex resumed>) = 1 [pid 7106] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 225.212115][ T7106] loop0: detected capacity change from 0 to 4096 [ 225.231798][ T7106] ntfs: volume version 3.1. [pid 7105] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7105] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7105] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7105] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2066]}, 88) = 2066 ./strace-static-x86_64: Process 7107 attached [pid 7105] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7107] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7105] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7105] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7107] <... rseq resumed>) = 0 [pid 7107] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7107] ftruncate(4, 0 [pid 7106] <... write resumed>) = 1048064 [pid 7106] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7106] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7107] <... ftruncate resumed>) = 0 [pid 7107] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7105] <... futex resumed>) = 0 [pid 7107] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7105] close(3) = 0 [pid 7105] close(4) = 0 [pid 7105] close(5) = 0 [pid 7105] close(6) = -1 EBADF (Bad file descriptor) [pid 7105] close(7) = -1 EBADF (Bad file descriptor) [pid 7105] close(8) = -1 EBADF (Bad file descriptor) [pid 7105] close(9) = -1 EBADF (Bad file descriptor) [pid 7105] close(10) = -1 EBADF (Bad file descriptor) [pid 7105] close(11) = -1 EBADF (Bad file descriptor) [pid 7105] close(12) = -1 EBADF (Bad file descriptor) [pid 7105] close(13) = -1 EBADF (Bad file descriptor) [pid 7105] close(14) = -1 EBADF (Bad file descriptor) [pid 7105] close(15) = -1 EBADF (Bad file descriptor) [pid 7105] close(16) = -1 EBADF (Bad file descriptor) [pid 7105] close(17) = -1 EBADF (Bad file descriptor) [pid 7105] close(18) = -1 EBADF (Bad file descriptor) [pid 7105] close(19) = -1 EBADF (Bad file descriptor) [pid 7105] close(20) = -1 EBADF (Bad file descriptor) [pid 7105] close(21) = -1 EBADF (Bad file descriptor) [pid 7105] close(22) = -1 EBADF (Bad file descriptor) [pid 7105] close(23) = -1 EBADF (Bad file descriptor) [pid 7105] close(24) = -1 EBADF (Bad file descriptor) [pid 7105] close(25) = -1 EBADF (Bad file descriptor) [pid 7105] close(26) = -1 EBADF (Bad file descriptor) [pid 7105] close(27) = -1 EBADF (Bad file descriptor) [pid 7105] close(28) = -1 EBADF (Bad file descriptor) [pid 7105] close(29) = -1 EBADF (Bad file descriptor) [pid 7105] exit_group(0 [pid 7106] <... futex resumed>) = ? [pid 7106] +++ exited with 0 +++ [pid 7107] <... futex resumed>) = ? [pid 7107] +++ exited with 0 +++ [pid 7105] <... exit_group resumed>) = ? [pid 7105] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2064, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./694", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./694", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./694/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./694/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./694/cgroup.cpu") = 0 [pid 5028] umount2("./694/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./694/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./694/binderfs") = 0 [pid 5028] umount2("./694/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./694/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./694/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./694/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./694/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./694/file0") = 0 [pid 5028] umount2("./694/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./694/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./694/cgroup") = 0 [pid 5028] umount2("./694/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./694/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./694/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./694") = 0 [pid 5028] mkdir("./695", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7108 attached [pid 7108] set_robust_list(0x5555563a56a0, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2067 [pid 7108] chdir("./695") = 0 [pid 7108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7108] setpgid(0, 0) = 0 [pid 7108] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7108] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7108] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7108] write(3, "1000", 4) = 4 [pid 7108] close(3) = 0 [pid 7108] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7108] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7108] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7108] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7108] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7108] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7109 attached [pid 7109] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7108] <... clone3 resumed> => {parent_tid=[2068]}, 88) = 2068 [pid 7109] <... rseq resumed>) = 0 [pid 7108] rt_sigprocmask(SIG_SETMASK, [], [pid 7109] set_robust_list(0x7feeffcce9a0, 24 [pid 7108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7109] <... set_robust_list resumed>) = 0 [pid 7108] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7109] rt_sigprocmask(SIG_SETMASK, [], [pid 7108] <... futex resumed>) = 0 [pid 7109] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7108] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7109] memfd_create("syzkaller", 0) = 3 [pid 7109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7109] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7109] munmap(0x7feef78ae000, 2097152) = 0 [pid 7109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7109] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7109] close(3) = 0 [pid 7109] mkdir("./file0", 0777) = 0 [pid 7109] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7109] chdir("./file0") = 0 [pid 7109] ioctl(4, LOOP_CLR_FD) = 0 [pid 7109] close(4) = 0 [pid 7109] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7109] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7108] <... futex resumed>) = 0 [pid 7108] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7109] <... futex resumed>) = 0 [pid 7109] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7108] <... futex resumed>) = 1 [pid 7108] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7109] <... openat resumed>) = 4 [pid 7109] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7108] <... futex resumed>) = 0 [pid 7109] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7108] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7108] <... futex resumed>) = 0 [pid 7109] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7108] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7109] <... openat resumed>) = 5 [pid 7109] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7109] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7108] <... futex resumed>) = 0 [pid 7108] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7108] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 225.438926][ T7109] loop0: detected capacity change from 0 to 4096 [ 225.458916][ T7109] ntfs: volume version 3.1. [pid 7109] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7108] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7108] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7108] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7110 attached => {parent_tid=[2069]}, 88) = 2069 [pid 7110] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7110] set_robust_list(0x7feef7aad9a0, 24 [pid 7108] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7110] <... set_robust_list resumed>) = 0 [pid 7108] <... futex resumed>) = 0 [pid 7110] rt_sigprocmask(SIG_SETMASK, [], [pid 7108] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7110] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7110] ftruncate(4, 0) = 0 [pid 7109] <... write resumed>) = 1048064 [pid 7110] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7109] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7110] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7109] <... futex resumed>) = 0 [pid 7109] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7108] <... futex resumed>) = 0 [pid 7108] close(3) = 0 [pid 7108] close(4) = 0 [pid 7108] close(5) = 0 [pid 7108] close(6) = -1 EBADF (Bad file descriptor) [pid 7108] close(7) = -1 EBADF (Bad file descriptor) [pid 7108] close(8) = -1 EBADF (Bad file descriptor) [pid 7108] close(9) = -1 EBADF (Bad file descriptor) [pid 7108] close(10) = -1 EBADF (Bad file descriptor) [pid 7108] close(11) = -1 EBADF (Bad file descriptor) [pid 7108] close(12) = -1 EBADF (Bad file descriptor) [pid 7108] close(13) = -1 EBADF (Bad file descriptor) [pid 7108] close(14) = -1 EBADF (Bad file descriptor) [pid 7108] close(15) = -1 EBADF (Bad file descriptor) [pid 7108] close(16) = -1 EBADF (Bad file descriptor) [pid 7108] close(17) = -1 EBADF (Bad file descriptor) [pid 7108] close(18) = -1 EBADF (Bad file descriptor) [pid 7108] close(19) = -1 EBADF (Bad file descriptor) [pid 7108] close(20) = -1 EBADF (Bad file descriptor) [pid 7108] close(21) = -1 EBADF (Bad file descriptor) [pid 7108] close(22) = -1 EBADF (Bad file descriptor) [pid 7108] close(23) = -1 EBADF (Bad file descriptor) [pid 7108] close(24) = -1 EBADF (Bad file descriptor) [pid 7108] close(25) = -1 EBADF (Bad file descriptor) [pid 7108] close(26) = -1 EBADF (Bad file descriptor) [pid 7108] close(27) = -1 EBADF (Bad file descriptor) [pid 7108] close(28) = -1 EBADF (Bad file descriptor) [pid 7108] close(29) = -1 EBADF (Bad file descriptor) [pid 7108] exit_group(0) = ? [pid 7109] <... futex resumed>) = ? [pid 7110] <... futex resumed>) = ? [pid 7109] +++ exited with 0 +++ [pid 7110] +++ exited with 0 +++ [pid 7108] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2067, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./695", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./695", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./695/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./695/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./695/cgroup.cpu") = 0 [pid 5028] umount2("./695/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./695/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./695/binderfs") = 0 [pid 5028] umount2("./695/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./695/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./695/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./695/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./695/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./695/file0") = 0 [pid 5028] umount2("./695/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./695/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./695/cgroup") = 0 [pid 5028] umount2("./695/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./695/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./695/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./695") = 0 [pid 5028] mkdir("./696", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7111 attached , child_tidptr=0x5555563a5690) = 2070 [pid 7111] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7111] chdir("./696") = 0 [pid 7111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7111] setpgid(0, 0) = 0 [pid 7111] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7111] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7111] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7111] write(3, "1000", 4) = 4 [pid 7111] close(3) = 0 [pid 7111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7111] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7111] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7111] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7111] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7111] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7111] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7112 attached => {parent_tid=[2071]}, 88) = 2071 [pid 7112] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7111] rt_sigprocmask(SIG_SETMASK, [], [pid 7112] set_robust_list(0x7feeffcce9a0, 24 [pid 7111] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7111] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7111] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7112] <... set_robust_list resumed>) = 0 [pid 7112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7112] memfd_create("syzkaller", 0) = 3 [pid 7112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7112] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7112] munmap(0x7feef78ae000, 2097152) = 0 [pid 7112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7112] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7112] close(3) = 0 [pid 7112] mkdir("./file0", 0777) = 0 [pid 7112] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7112] chdir("./file0") = 0 [pid 7112] ioctl(4, LOOP_CLR_FD) = 0 [pid 7112] close(4) = 0 [pid 7112] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7112] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7111] <... futex resumed>) = 0 [pid 7111] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7112] <... futex resumed>) = 0 [pid 7111] <... futex resumed>) = 1 [pid 7112] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7111] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7112] <... openat resumed>) = 4 [pid 7112] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7111] <... futex resumed>) = 0 [pid 7112] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7111] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7111] <... futex resumed>) = 0 [pid 7112] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7111] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7112] <... openat resumed>) = 5 [pid 7112] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7111] <... futex resumed>) = 0 [pid 7112] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7111] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7112] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7111] <... futex resumed>) = 0 [ 225.661880][ T7112] loop0: detected capacity change from 0 to 4096 [ 225.681905][ T7112] ntfs: volume version 3.1. [pid 7111] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7111] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7111] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7111] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7111] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7113 attached [pid 7113] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7111] <... clone3 resumed> => {parent_tid=[2072]}, 88) = 2072 [pid 7113] set_robust_list(0x7feef7aad9a0, 24 [pid 7111] rt_sigprocmask(SIG_SETMASK, [], [pid 7113] <... set_robust_list resumed>) = 0 [pid 7111] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7111] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7113] ftruncate(4, 0 [pid 7111] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7113] <... ftruncate resumed>) = 0 [pid 7113] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7112] <... write resumed>) = 1048064 [pid 7112] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7112] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7113] <... futex resumed>) = 1 [pid 7113] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7111] <... futex resumed>) = 0 [pid 7111] close(3) = 0 [pid 7111] close(4) = 0 [pid 7111] close(5) = 0 [pid 7111] close(6) = -1 EBADF (Bad file descriptor) [pid 7111] close(7) = -1 EBADF (Bad file descriptor) [pid 7111] close(8) = -1 EBADF (Bad file descriptor) [pid 7111] close(9) = -1 EBADF (Bad file descriptor) [pid 7111] close(10) = -1 EBADF (Bad file descriptor) [pid 7111] close(11) = -1 EBADF (Bad file descriptor) [pid 7111] close(12) = -1 EBADF (Bad file descriptor) [pid 7111] close(13) = -1 EBADF (Bad file descriptor) [pid 7111] close(14) = -1 EBADF (Bad file descriptor) [pid 7111] close(15) = -1 EBADF (Bad file descriptor) [pid 7111] close(16) = -1 EBADF (Bad file descriptor) [pid 7111] close(17) = -1 EBADF (Bad file descriptor) [pid 7111] close(18) = -1 EBADF (Bad file descriptor) [pid 7111] close(19) = -1 EBADF (Bad file descriptor) [pid 7111] close(20) = -1 EBADF (Bad file descriptor) [pid 7111] close(21) = -1 EBADF (Bad file descriptor) [pid 7111] close(22) = -1 EBADF (Bad file descriptor) [pid 7111] close(23) = -1 EBADF (Bad file descriptor) [pid 7111] close(24) = -1 EBADF (Bad file descriptor) [pid 7111] close(25) = -1 EBADF (Bad file descriptor) [pid 7111] close(26) = -1 EBADF (Bad file descriptor) [pid 7111] close(27) = -1 EBADF (Bad file descriptor) [pid 7111] close(28) = -1 EBADF (Bad file descriptor) [pid 7111] close(29) = -1 EBADF (Bad file descriptor) [pid 7111] exit_group(0) = ? [pid 7113] <... futex resumed>) = ? [pid 7112] <... futex resumed>) = ? [pid 7113] +++ exited with 0 +++ [pid 7112] +++ exited with 0 +++ [pid 7111] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2070, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./696", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./696", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./696/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./696/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./696/cgroup.cpu") = 0 [pid 5028] umount2("./696/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./696/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./696/binderfs") = 0 [pid 5028] umount2("./696/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./696/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./696/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./696/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./696/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./696/file0") = 0 [pid 5028] umount2("./696/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./696/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./696/cgroup") = 0 [pid 5028] umount2("./696/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./696/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./696/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./696") = 0 [pid 5028] mkdir("./697", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7114 attached , child_tidptr=0x5555563a5690) = 2073 [pid 7114] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7114] chdir("./697") = 0 [pid 7114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7114] setpgid(0, 0) = 0 [pid 7114] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7114] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7114] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7114] write(3, "1000", 4) = 4 [pid 7114] close(3) = 0 [pid 7114] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7114] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7114] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7114] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7114] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7114] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2074]}, 88) = 2074 [pid 7114] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7115 attached [pid 7115] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7114] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7114] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7115] <... rseq resumed>) = 0 [pid 7115] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7115] memfd_create("syzkaller", 0) = 3 [pid 7115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7115] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7115] munmap(0x7feef78ae000, 2097152) = 0 [pid 7115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7115] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7115] close(3) = 0 [pid 7115] mkdir("./file0", 0777) = 0 [pid 7115] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7115] chdir("./file0") = 0 [pid 7115] ioctl(4, LOOP_CLR_FD) = 0 [pid 7115] close(4) = 0 [pid 7115] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7114] <... futex resumed>) = 0 [pid 7115] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7114] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7114] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7115] <... openat resumed>) = 4 [pid 7115] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7114] <... futex resumed>) = 0 [pid 7114] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7115] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7114] <... futex resumed>) = 0 [pid 7115] <... openat resumed>) = 5 [pid 7114] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7115] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7114] <... futex resumed>) = 0 [pid 7114] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7115] <... futex resumed>) = 1 [pid 7114] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 225.896272][ T7115] loop0: detected capacity change from 0 to 4096 [ 225.917134][ T7115] ntfs: volume version 3.1. [pid 7115] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7114] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7114] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7114] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7114] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7116 attached [pid 7116] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7116] set_robust_list(0x7feef7aad9a0, 24 [pid 7114] <... clone3 resumed> => {parent_tid=[2075]}, 88) = 2075 [pid 7116] <... set_robust_list resumed>) = 0 [pid 7116] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7114] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7116] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7114] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7114] <... futex resumed>) = 0 [pid 7116] ftruncate(4, 0 [pid 7114] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7116] <... ftruncate resumed>) = 0 [pid 7116] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7115] <... write resumed>) = 1048064 [pid 7116] <... futex resumed>) = 1 [pid 7115] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7116] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7114] <... futex resumed>) = 0 [pid 7114] close(3) = 0 [pid 7114] close(4) = 0 [pid 7115] <... futex resumed>) = 0 [pid 7115] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7114] close(5) = 0 [pid 7114] close(6) = -1 EBADF (Bad file descriptor) [pid 7114] close(7) = -1 EBADF (Bad file descriptor) [pid 7114] close(8) = -1 EBADF (Bad file descriptor) [pid 7114] close(9) = -1 EBADF (Bad file descriptor) [pid 7114] close(10) = -1 EBADF (Bad file descriptor) [pid 7114] close(11) = -1 EBADF (Bad file descriptor) [pid 7114] close(12) = -1 EBADF (Bad file descriptor) [pid 7114] close(13) = -1 EBADF (Bad file descriptor) [pid 7114] close(14) = -1 EBADF (Bad file descriptor) [pid 7114] close(15) = -1 EBADF (Bad file descriptor) [pid 7114] close(16) = -1 EBADF (Bad file descriptor) [pid 7114] close(17) = -1 EBADF (Bad file descriptor) [pid 7114] close(18) = -1 EBADF (Bad file descriptor) [pid 7114] close(19) = -1 EBADF (Bad file descriptor) [pid 7114] close(20) = -1 EBADF (Bad file descriptor) [pid 7114] close(21) = -1 EBADF (Bad file descriptor) [pid 7114] close(22) = -1 EBADF (Bad file descriptor) [pid 7114] close(23) = -1 EBADF (Bad file descriptor) [pid 7114] close(24) = -1 EBADF (Bad file descriptor) [pid 7114] close(25) = -1 EBADF (Bad file descriptor) [pid 7114] close(26) = -1 EBADF (Bad file descriptor) [pid 7114] close(27) = -1 EBADF (Bad file descriptor) [pid 7114] close(28) = -1 EBADF (Bad file descriptor) [pid 7114] close(29) = -1 EBADF (Bad file descriptor) [pid 7114] exit_group(0) = ? [pid 7116] <... futex resumed>) = ? [pid 7115] <... futex resumed>) = ? [pid 7116] +++ exited with 0 +++ [pid 7115] +++ exited with 0 +++ [pid 7114] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2073, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./697", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./697", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./697/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./697/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./697/cgroup.cpu") = 0 [pid 5028] umount2("./697/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./697/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./697/binderfs") = 0 [pid 5028] umount2("./697/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./697/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./697/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./697/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./697/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./697/file0") = 0 [pid 5028] umount2("./697/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./697/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./697/cgroup") = 0 [pid 5028] umount2("./697/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./697/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./697/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./697") = 0 [pid 5028] mkdir("./698", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7117 attached , child_tidptr=0x5555563a5690) = 2076 [pid 7117] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7117] chdir("./698") = 0 [pid 7117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7117] setpgid(0, 0) = 0 [pid 7117] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7117] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7117] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7117] write(3, "1000", 4) = 4 [pid 7117] close(3) = 0 [pid 7117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7117] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7117] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7117] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7117] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7117] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7117] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7118 attached [pid 7118] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7117] <... clone3 resumed> => {parent_tid=[2077]}, 88) = 2077 [pid 7118] <... rseq resumed>) = 0 [pid 7117] rt_sigprocmask(SIG_SETMASK, [], [pid 7118] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7117] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7118] rt_sigprocmask(SIG_SETMASK, [], [pid 7117] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7117] <... futex resumed>) = 0 [pid 7118] memfd_create("syzkaller", 0 [pid 7117] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7118] <... memfd_create resumed>) = 3 [pid 7118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7118] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7118] munmap(0x7feef78ae000, 2097152) = 0 [pid 7118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7118] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7118] close(3) = 0 [pid 7118] mkdir("./file0", 0777) = 0 [pid 7118] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7118] chdir("./file0") = 0 [pid 7118] ioctl(4, LOOP_CLR_FD) = 0 [pid 7118] close(4) = 0 [pid 7118] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7117] <... futex resumed>) = 0 [pid 7118] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7117] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7117] <... futex resumed>) = 0 [pid 7118] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7117] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7118] <... openat resumed>) = 4 [pid 7118] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7117] <... futex resumed>) = 0 [pid 7118] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7117] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... openat resumed>) = 5 [pid 7117] <... futex resumed>) = 0 [pid 7118] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7117] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7118] <... futex resumed>) = 0 [pid 7118] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7117] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... futex resumed>) = 0 [pid 7117] <... futex resumed>) = 1 [pid 7118] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 226.129035][ T7118] loop0: detected capacity change from 0 to 4096 [ 226.151075][ T7118] ntfs: volume version 3.1. [pid 7117] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7117] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7117] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7117] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7117] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7119 attached [pid 7119] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7117] <... clone3 resumed> => {parent_tid=[2078]}, 88) = 2078 [pid 7117] rt_sigprocmask(SIG_SETMASK, [], [pid 7119] <... rseq resumed>) = 0 [pid 7119] set_robust_list(0x7feef7aad9a0, 24 [pid 7117] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7119] <... set_robust_list resumed>) = 0 [pid 7119] rt_sigprocmask(SIG_SETMASK, [], [pid 7117] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7119] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7117] <... futex resumed>) = 0 [pid 7119] ftruncate(4, 0 [pid 7117] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7119] <... ftruncate resumed>) = 0 [pid 7119] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7118] <... write resumed>) = 1048064 [pid 7119] <... futex resumed>) = 1 [pid 7117] <... futex resumed>) = 0 [pid 7119] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7118] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7117] close(3 [pid 7118] <... futex resumed>) = 0 [pid 7117] <... close resumed>) = 0 [pid 7118] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7117] close(4) = 0 [pid 7117] close(5) = 0 [pid 7117] close(6) = -1 EBADF (Bad file descriptor) [pid 7117] close(7) = -1 EBADF (Bad file descriptor) [pid 7117] close(8) = -1 EBADF (Bad file descriptor) [pid 7117] close(9) = -1 EBADF (Bad file descriptor) [pid 7117] close(10) = -1 EBADF (Bad file descriptor) [pid 7117] close(11) = -1 EBADF (Bad file descriptor) [pid 7117] close(12) = -1 EBADF (Bad file descriptor) [pid 7117] close(13) = -1 EBADF (Bad file descriptor) [pid 7117] close(14) = -1 EBADF (Bad file descriptor) [pid 7117] close(15) = -1 EBADF (Bad file descriptor) [pid 7117] close(16) = -1 EBADF (Bad file descriptor) [pid 7117] close(17) = -1 EBADF (Bad file descriptor) [pid 7117] close(18) = -1 EBADF (Bad file descriptor) [pid 7117] close(19) = -1 EBADF (Bad file descriptor) [pid 7117] close(20) = -1 EBADF (Bad file descriptor) [pid 7117] close(21) = -1 EBADF (Bad file descriptor) [pid 7117] close(22) = -1 EBADF (Bad file descriptor) [pid 7117] close(23) = -1 EBADF (Bad file descriptor) [pid 7117] close(24) = -1 EBADF (Bad file descriptor) [pid 7117] close(25) = -1 EBADF (Bad file descriptor) [pid 7117] close(26) = -1 EBADF (Bad file descriptor) [pid 7117] close(27) = -1 EBADF (Bad file descriptor) [pid 7117] close(28) = -1 EBADF (Bad file descriptor) [pid 7117] close(29) = -1 EBADF (Bad file descriptor) [pid 7117] exit_group(0) = ? [pid 7118] <... futex resumed>) = ? [pid 7119] <... futex resumed>) = ? [pid 7119] +++ exited with 0 +++ [pid 7118] +++ exited with 0 +++ [pid 7117] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2076, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./698", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./698", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./698/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./698/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./698/cgroup.cpu") = 0 [pid 5028] umount2("./698/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./698/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./698/binderfs") = 0 [pid 5028] umount2("./698/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./698/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./698/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./698/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./698/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./698/file0") = 0 [pid 5028] umount2("./698/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./698/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./698/cgroup") = 0 [pid 5028] umount2("./698/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./698/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./698/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./698") = 0 [pid 5028] mkdir("./699", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7120 attached [pid 7120] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2079 [pid 7120] <... set_robust_list resumed>) = 0 [pid 7120] chdir("./699") = 0 [pid 7120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7120] setpgid(0, 0) = 0 [pid 7120] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7120] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7120] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7120] write(3, "1000", 4) = 4 [pid 7120] close(3) = 0 [pid 7120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7120] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7120] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7120] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7120] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7120] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7121 attached => {parent_tid=[2080]}, 88) = 2080 [pid 7121] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7120] rt_sigprocmask(SIG_SETMASK, [], [pid 7121] <... rseq resumed>) = 0 [pid 7120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7121] set_robust_list(0x7feeffcce9a0, 24 [pid 7120] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7121] <... set_robust_list resumed>) = 0 [pid 7120] <... futex resumed>) = 0 [pid 7121] rt_sigprocmask(SIG_SETMASK, [], [pid 7120] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7121] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7121] memfd_create("syzkaller", 0) = 3 [pid 7121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7121] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7121] munmap(0x7feef78ae000, 2097152) = 0 [pid 7121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7121] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7121] close(3) = 0 [pid 7121] mkdir("./file0", 0777) = 0 [ 226.364532][ T7121] loop0: detected capacity change from 0 to 4096 [ 226.373718][ T7121] __ntfs_warning: 12 callbacks suppressed [ 226.373733][ T7121] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7121] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7121] chdir("./file0") = 0 [pid 7121] ioctl(4, LOOP_CLR_FD) = 0 [pid 7121] close(4) = 0 [pid 7121] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7121] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7120] <... futex resumed>) = 0 [pid 7120] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7121] <... futex resumed>) = 0 [pid 7120] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7121] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7121] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7121] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7120] <... futex resumed>) = 0 [pid 7120] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7121] <... futex resumed>) = 0 [pid 7121] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7120] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7121] <... openat resumed>) = 5 [pid 7121] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7120] <... futex resumed>) = 0 [pid 7121] <... futex resumed>) = 1 [pid 7120] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7121] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 226.410603][ T7121] ntfs: volume version 3.1. [pid 7120] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7120] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7120] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7120] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7122 attached => {parent_tid=[2081]}, 88) = 2081 [pid 7122] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7120] rt_sigprocmask(SIG_SETMASK, [], [pid 7122] <... rseq resumed>) = 0 [pid 7120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7122] set_robust_list(0x7feef7aad9a0, 24 [pid 7120] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7122] <... set_robust_list resumed>) = 0 [pid 7120] <... futex resumed>) = 0 [pid 7122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7120] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7122] ftruncate(4, 0) = 0 [pid 7122] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7122] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7120] <... futex resumed>) = 0 [pid 7121] <... write resumed>) = 1048064 [pid 7121] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7121] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7120] close(3) = 0 [pid 7120] close(4) = 0 [pid 7120] close(5) = 0 [pid 7120] close(6) = -1 EBADF (Bad file descriptor) [pid 7120] close(7) = -1 EBADF (Bad file descriptor) [pid 7120] close(8) = -1 EBADF (Bad file descriptor) [pid 7120] close(9) = -1 EBADF (Bad file descriptor) [pid 7120] close(10) = -1 EBADF (Bad file descriptor) [pid 7120] close(11) = -1 EBADF (Bad file descriptor) [pid 7120] close(12) = -1 EBADF (Bad file descriptor) [pid 7120] close(13) = -1 EBADF (Bad file descriptor) [pid 7120] close(14) = -1 EBADF (Bad file descriptor) [pid 7120] close(15) = -1 EBADF (Bad file descriptor) [pid 7120] close(16) = -1 EBADF (Bad file descriptor) [pid 7120] close(17) = -1 EBADF (Bad file descriptor) [pid 7120] close(18) = -1 EBADF (Bad file descriptor) [pid 7120] close(19) = -1 EBADF (Bad file descriptor) [pid 7120] close(20) = -1 EBADF (Bad file descriptor) [pid 7120] close(21) = -1 EBADF (Bad file descriptor) [pid 7120] close(22) = -1 EBADF (Bad file descriptor) [pid 7120] close(23) = -1 EBADF (Bad file descriptor) [pid 7120] close(24) = -1 EBADF (Bad file descriptor) [pid 7120] close(25) = -1 EBADF (Bad file descriptor) [pid 7120] close(26) = -1 EBADF (Bad file descriptor) [pid 7120] close(27) = -1 EBADF (Bad file descriptor) [pid 7120] close(28) = -1 EBADF (Bad file descriptor) [pid 7120] close(29) = -1 EBADF (Bad file descriptor) [pid 7120] exit_group(0) = ? [pid 7121] <... futex resumed>) = ? [pid 7122] <... futex resumed>) = ? [pid 7121] +++ exited with 0 +++ [pid 7122] +++ exited with 0 +++ [pid 7120] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2079, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./699", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./699", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./699/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./699/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./699/cgroup.cpu") = 0 [pid 5028] umount2("./699/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./699/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./699/binderfs") = 0 [pid 5028] umount2("./699/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./699/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./699/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./699/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./699/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./699/file0") = 0 [pid 5028] umount2("./699/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./699/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./699/cgroup") = 0 [pid 5028] umount2("./699/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./699/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./699/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./699") = 0 [pid 5028] mkdir("./700", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7123 attached , child_tidptr=0x5555563a5690) = 2082 [pid 7123] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7123] chdir("./700") = 0 [pid 7123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7123] setpgid(0, 0) = 0 [pid 7123] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7123] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7123] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7123] write(3, "1000", 4) = 4 [pid 7123] close(3) = 0 [pid 7123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7123] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7123] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7123] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7123] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7123] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7124 attached [pid 7124] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7123] <... clone3 resumed> => {parent_tid=[2083]}, 88) = 2083 [pid 7124] <... rseq resumed>) = 0 [pid 7124] set_robust_list(0x7feeffcce9a0, 24 [pid 7123] rt_sigprocmask(SIG_SETMASK, [], [pid 7124] <... set_robust_list resumed>) = 0 [pid 7123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7123] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7124] memfd_create("syzkaller", 0 [pid 7123] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7124] <... memfd_create resumed>) = 3 [pid 7124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7124] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7124] munmap(0x7feef78ae000, 2097152) = 0 [pid 7124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7124] close(3) = 0 [pid 7124] mkdir("./file0", 0777) = 0 [pid 7124] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7124] chdir("./file0") = 0 [pid 7124] ioctl(4, LOOP_CLR_FD) = 0 [pid 7124] close(4) = 0 [pid 7124] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7123] <... futex resumed>) = 0 [pid 7123] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7123] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7124] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7124] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7123] <... futex resumed>) = 0 [pid 7123] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] <... futex resumed>) = 0 [pid 7123] <... futex resumed>) = 1 [pid 7124] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7123] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7124] <... openat resumed>) = 5 [pid 7124] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7123] <... futex resumed>) = 0 [pid 7124] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7123] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7124] <... futex resumed>) = 0 [pid 7123] <... futex resumed>) = 1 [pid 7124] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 226.598082][ T7124] loop0: detected capacity change from 0 to 4096 [ 226.607438][ T7124] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 226.639526][ T7124] ntfs: volume version 3.1. [pid 7123] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7123] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7123] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7123] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7125 attached [pid 7125] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7123] <... clone3 resumed> => {parent_tid=[2084]}, 88) = 2084 [pid 7125] set_robust_list(0x7feef7aad9a0, 24 [pid 7123] rt_sigprocmask(SIG_SETMASK, [], [pid 7125] <... set_robust_list resumed>) = 0 [pid 7125] rt_sigprocmask(SIG_SETMASK, [], [pid 7123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7123] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7125] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7125] ftruncate(4, 0 [pid 7123] <... futex resumed>) = 0 [pid 7123] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7125] <... ftruncate resumed>) = 0 [pid 7125] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7123] <... futex resumed>) = 0 [pid 7125] <... futex resumed>) = 1 [pid 7125] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7124] <... write resumed>) = 1048064 [pid 7124] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7124] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7123] close(3) = 0 [pid 7123] close(4) = 0 [pid 7123] close(5) = 0 [pid 7123] close(6) = -1 EBADF (Bad file descriptor) [pid 7123] close(7) = -1 EBADF (Bad file descriptor) [pid 7123] close(8) = -1 EBADF (Bad file descriptor) [pid 7123] close(9) = -1 EBADF (Bad file descriptor) [pid 7123] close(10) = -1 EBADF (Bad file descriptor) [pid 7123] close(11) = -1 EBADF (Bad file descriptor) [pid 7123] close(12) = -1 EBADF (Bad file descriptor) [pid 7123] close(13) = -1 EBADF (Bad file descriptor) [pid 7123] close(14) = -1 EBADF (Bad file descriptor) [pid 7123] close(15) = -1 EBADF (Bad file descriptor) [pid 7123] close(16) = -1 EBADF (Bad file descriptor) [pid 7123] close(17) = -1 EBADF (Bad file descriptor) [pid 7123] close(18) = -1 EBADF (Bad file descriptor) [pid 7123] close(19) = -1 EBADF (Bad file descriptor) [pid 7123] close(20) = -1 EBADF (Bad file descriptor) [pid 7123] close(21) = -1 EBADF (Bad file descriptor) [pid 7123] close(22) = -1 EBADF (Bad file descriptor) [pid 7123] close(23) = -1 EBADF (Bad file descriptor) [pid 7123] close(24) = -1 EBADF (Bad file descriptor) [pid 7123] close(25) = -1 EBADF (Bad file descriptor) [pid 7123] close(26) = -1 EBADF (Bad file descriptor) [pid 7123] close(27) = -1 EBADF (Bad file descriptor) [pid 7123] close(28) = -1 EBADF (Bad file descriptor) [pid 7123] close(29) = -1 EBADF (Bad file descriptor) [pid 7123] exit_group(0) = ? [pid 7125] <... futex resumed>) = ? [pid 7124] <... futex resumed>) = ? [pid 7125] +++ exited with 0 +++ [pid 7124] +++ exited with 0 +++ [pid 7123] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2082, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./700", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./700", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./700/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./700/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./700/cgroup.cpu") = 0 [pid 5028] umount2("./700/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./700/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./700/binderfs") = 0 [pid 5028] umount2("./700/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./700/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./700/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./700/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./700/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./700/file0") = 0 [pid 5028] umount2("./700/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./700/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./700/cgroup") = 0 [pid 5028] umount2("./700/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./700/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./700/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./700") = 0 [pid 5028] mkdir("./701", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7126 attached [pid 7126] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2085 [pid 7126] <... set_robust_list resumed>) = 0 [pid 7126] chdir("./701") = 0 [pid 7126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7126] setpgid(0, 0) = 0 [pid 7126] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7126] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7126] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7126] write(3, "1000", 4) = 4 [pid 7126] close(3) = 0 [pid 7126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7126] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7126] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7126] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7126] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2086]}, 88) = 2086 [pid 7126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7126] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7127 attached [pid 7127] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7127] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7127] memfd_create("syzkaller", 0) = 3 [pid 7127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7127] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7127] munmap(0x7feef78ae000, 2097152) = 0 [pid 7127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7127] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7127] close(3) = 0 [pid 7127] mkdir("./file0", 0777) = 0 [pid 7127] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7127] chdir("./file0") = 0 [pid 7127] ioctl(4, LOOP_CLR_FD) = 0 [pid 7127] close(4) = 0 [pid 7127] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7127] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7126] <... futex resumed>) = 0 [pid 7126] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... futex resumed>) = 0 [pid 7126] <... futex resumed>) = 1 [pid 7127] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7126] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7127] <... openat resumed>) = 4 [pid 7127] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7126] <... futex resumed>) = 0 [pid 7126] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7126] <... futex resumed>) = 0 [pid 7127] <... openat resumed>) = 5 [pid 7127] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7127] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7126] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7126] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... futex resumed>) = 0 [pid 7126] <... futex resumed>) = 1 [pid 7127] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 226.864084][ T7127] loop0: detected capacity change from 0 to 4096 [ 226.874264][ T7127] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 226.907354][ T7127] ntfs: volume version 3.1. [pid 7126] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7126] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7126] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7126] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7129 attached [pid 7129] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7126] <... clone3 resumed> => {parent_tid=[2087]}, 88) = 2087 [pid 7126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7126] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7129] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7129] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7129] ftruncate(4, 0) = 0 [pid 7129] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7127] <... write resumed>) = 1048064 [pid 7129] <... futex resumed>) = 1 [pid 7129] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7127] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7126] <... futex resumed>) = 0 [pid 7127] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7126] close(3) = 0 [pid 7126] close(4) = 0 [pid 7126] close(5) = 0 [pid 7126] close(6) = -1 EBADF (Bad file descriptor) [pid 7126] close(7) = -1 EBADF (Bad file descriptor) [pid 7126] close(8) = -1 EBADF (Bad file descriptor) [pid 7126] close(9) = -1 EBADF (Bad file descriptor) [pid 7126] close(10) = -1 EBADF (Bad file descriptor) [pid 7126] close(11) = -1 EBADF (Bad file descriptor) [pid 7126] close(12) = -1 EBADF (Bad file descriptor) [pid 7126] close(13) = -1 EBADF (Bad file descriptor) [pid 7126] close(14) = -1 EBADF (Bad file descriptor) [pid 7126] close(15) = -1 EBADF (Bad file descriptor) [pid 7126] close(16) = -1 EBADF (Bad file descriptor) [pid 7126] close(17) = -1 EBADF (Bad file descriptor) [pid 7126] close(18) = -1 EBADF (Bad file descriptor) [pid 7126] close(19) = -1 EBADF (Bad file descriptor) [pid 7126] close(20) = -1 EBADF (Bad file descriptor) [pid 7126] close(21) = -1 EBADF (Bad file descriptor) [pid 7126] close(22) = -1 EBADF (Bad file descriptor) [pid 7126] close(23) = -1 EBADF (Bad file descriptor) [pid 7126] close(24) = -1 EBADF (Bad file descriptor) [pid 7126] close(25) = -1 EBADF (Bad file descriptor) [pid 7126] close(26) = -1 EBADF (Bad file descriptor) [pid 7126] close(27) = -1 EBADF (Bad file descriptor) [pid 7126] close(28) = -1 EBADF (Bad file descriptor) [pid 7126] close(29) = -1 EBADF (Bad file descriptor) [pid 7126] exit_group(0) = ? [pid 7127] <... futex resumed>) = ? [pid 7129] <... futex resumed>) = ? [pid 7129] +++ exited with 0 +++ [pid 7127] +++ exited with 0 +++ [pid 7126] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2085, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./701", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./701", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./701/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./701/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./701/cgroup.cpu") = 0 [pid 5028] umount2("./701/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./701/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./701/binderfs") = 0 [pid 5028] umount2("./701/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./701/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./701/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./701/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./701/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./701/file0") = 0 [pid 5028] umount2("./701/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./701/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./701/cgroup") = 0 [pid 5028] umount2("./701/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./701/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./701/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./701") = 0 [pid 5028] mkdir("./702", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2088 ./strace-static-x86_64: Process 7130 attached [pid 7130] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7130] chdir("./702") = 0 [pid 7130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7130] setpgid(0, 0) = 0 [pid 7130] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7130] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7130] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7130] write(3, "1000", 4) = 4 [pid 7130] close(3) = 0 [pid 7130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7130] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7130] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7130] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7130] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7131 attached => {parent_tid=[2089]}, 88) = 2089 [pid 7131] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7130] rt_sigprocmask(SIG_SETMASK, [], [pid 7131] set_robust_list(0x7feeffcce9a0, 24 [pid 7130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7131] <... set_robust_list resumed>) = 0 [pid 7131] rt_sigprocmask(SIG_SETMASK, [], [pid 7130] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7130] <... futex resumed>) = 0 [pid 7130] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7131] memfd_create("syzkaller", 0) = 3 [pid 7131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7131] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7131] munmap(0x7feef78ae000, 2097152) = 0 [pid 7131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7131] close(3) = 0 [pid 7131] mkdir("./file0", 0777) = 0 [pid 7131] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7131] chdir("./file0") = 0 [pid 7131] ioctl(4, LOOP_CLR_FD) = 0 [pid 7131] close(4) = 0 [pid 7131] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7131] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] <... futex resumed>) = 0 [pid 7130] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] <... futex resumed>) = 0 [pid 7130] <... futex resumed>) = 1 [pid 7131] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7130] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] <... openat resumed>) = 4 [pid 7131] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] <... futex resumed>) = 0 [pid 7131] <... futex resumed>) = 1 [pid 7130] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7130] <... futex resumed>) = 0 [pid 7130] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7131] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7130] <... futex resumed>) = 0 [pid 7130] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7131] <... futex resumed>) = 1 [pid 7130] <... futex resumed>) = 0 [pid 7131] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 227.116157][ T7131] loop0: detected capacity change from 0 to 4096 [ 227.125396][ T7131] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 227.156793][ T7131] ntfs: volume version 3.1. [pid 7130] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7130] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7130] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7130] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7132 attached [pid 7132] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7132] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7130] <... clone3 resumed> => {parent_tid=[2090]}, 88) = 2090 [pid 7132] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7130] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7132] <... futex resumed>) = 0 [pid 7130] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7132] ftruncate(4, 0) = 0 [pid 7132] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7132] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] <... futex resumed>) = 0 [pid 7131] <... write resumed>) = 1048064 [pid 7131] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7131] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7130] close(3) = 0 [pid 7130] close(4) = 0 [pid 7130] close(5) = 0 [pid 7130] close(6) = -1 EBADF (Bad file descriptor) [pid 7130] close(7) = -1 EBADF (Bad file descriptor) [pid 7130] close(8) = -1 EBADF (Bad file descriptor) [pid 7130] close(9) = -1 EBADF (Bad file descriptor) [pid 7130] close(10) = -1 EBADF (Bad file descriptor) [pid 7130] close(11) = -1 EBADF (Bad file descriptor) [pid 7130] close(12) = -1 EBADF (Bad file descriptor) [pid 7130] close(13) = -1 EBADF (Bad file descriptor) [pid 7130] close(14) = -1 EBADF (Bad file descriptor) [pid 7130] close(15) = -1 EBADF (Bad file descriptor) [pid 7130] close(16) = -1 EBADF (Bad file descriptor) [pid 7130] close(17) = -1 EBADF (Bad file descriptor) [pid 7130] close(18) = -1 EBADF (Bad file descriptor) [pid 7130] close(19) = -1 EBADF (Bad file descriptor) [pid 7130] close(20) = -1 EBADF (Bad file descriptor) [pid 7130] close(21) = -1 EBADF (Bad file descriptor) [pid 7130] close(22) = -1 EBADF (Bad file descriptor) [pid 7130] close(23) = -1 EBADF (Bad file descriptor) [pid 7130] close(24) = -1 EBADF (Bad file descriptor) [pid 7130] close(25) = -1 EBADF (Bad file descriptor) [pid 7130] close(26) = -1 EBADF (Bad file descriptor) [pid 7130] close(27) = -1 EBADF (Bad file descriptor) [pid 7130] close(28) = -1 EBADF (Bad file descriptor) [pid 7130] close(29) = -1 EBADF (Bad file descriptor) [pid 7130] exit_group(0) = ? [pid 7132] <... futex resumed>) = ? [pid 7131] <... futex resumed>) = ? [pid 7132] +++ exited with 0 +++ [pid 7131] +++ exited with 0 +++ [pid 7130] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2088, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./702", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./702", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./702/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./702/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./702/cgroup.cpu") = 0 [pid 5028] umount2("./702/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./702/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./702/binderfs") = 0 [pid 5028] umount2("./702/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./702/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./702/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./702/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./702/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./702/file0") = 0 [pid 5028] umount2("./702/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./702/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./702/cgroup") = 0 [pid 5028] umount2("./702/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./702/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./702/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./702") = 0 [pid 5028] mkdir("./703", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7133 attached , child_tidptr=0x5555563a5690) = 2091 [pid 7133] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7133] chdir("./703") = 0 [pid 7133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7133] setpgid(0, 0) = 0 [pid 7133] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7133] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7133] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7133] write(3, "1000", 4) = 4 [pid 7133] close(3) = 0 [pid 7133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7133] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7133] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7133] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7133] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7134 attached => {parent_tid=[2092]}, 88) = 2092 [pid 7134] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7133] rt_sigprocmask(SIG_SETMASK, [], [pid 7134] <... rseq resumed>) = 0 [pid 7133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7134] set_robust_list(0x7feeffcce9a0, 24 [pid 7133] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7134] <... set_robust_list resumed>) = 0 [pid 7134] rt_sigprocmask(SIG_SETMASK, [], [pid 7133] <... futex resumed>) = 0 [pid 7134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7133] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7134] memfd_create("syzkaller", 0) = 3 [pid 7134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7134] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7134] munmap(0x7feef78ae000, 2097152) = 0 [pid 7134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7134] close(3) = 0 [pid 7134] mkdir("./file0", 0777) = 0 [pid 7134] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7134] chdir("./file0") = 0 [pid 7134] ioctl(4, LOOP_CLR_FD) = 0 [pid 7134] close(4) = 0 [pid 7134] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7134] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7133] <... futex resumed>) = 0 [pid 7133] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7134] <... futex resumed>) = 0 [pid 7134] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7133] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7134] <... openat resumed>) = 4 [pid 7134] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7133] <... futex resumed>) = 0 [pid 7134] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7133] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7133] <... futex resumed>) = 0 [pid 7133] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7134] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7134] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7133] <... futex resumed>) = 0 [pid 7134] <... futex resumed>) = 1 [pid 7133] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7134] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7133] <... futex resumed>) = 0 [ 227.358407][ T7134] loop0: detected capacity change from 0 to 4096 [ 227.367373][ T7134] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 227.400435][ T7134] ntfs: volume version 3.1. [pid 7133] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7133] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7133] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7135 attached [pid 7135] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7135] set_robust_list(0x7feef7aad9a0, 24 [pid 7133] <... clone3 resumed> => {parent_tid=[2093]}, 88) = 2093 [pid 7135] <... set_robust_list resumed>) = 0 [pid 7135] rt_sigprocmask(SIG_SETMASK, [], [pid 7133] rt_sigprocmask(SIG_SETMASK, [], [pid 7135] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7135] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7133] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7135] <... futex resumed>) = 0 [pid 7135] ftruncate(4, 0 [pid 7133] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7135] <... ftruncate resumed>) = 0 [pid 7134] <... write resumed>) = 1048064 [pid 7135] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7134] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7135] <... futex resumed>) = 1 [pid 7134] <... futex resumed>) = 0 [pid 7135] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7133] <... futex resumed>) = 0 [pid 7134] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7133] close(3) = 0 [pid 7133] close(4) = 0 [pid 7133] close(5) = 0 [pid 7133] close(6) = -1 EBADF (Bad file descriptor) [pid 7133] close(7) = -1 EBADF (Bad file descriptor) [pid 7133] close(8) = -1 EBADF (Bad file descriptor) [pid 7133] close(9) = -1 EBADF (Bad file descriptor) [pid 7133] close(10) = -1 EBADF (Bad file descriptor) [pid 7133] close(11) = -1 EBADF (Bad file descriptor) [pid 7133] close(12) = -1 EBADF (Bad file descriptor) [pid 7133] close(13) = -1 EBADF (Bad file descriptor) [pid 7133] close(14) = -1 EBADF (Bad file descriptor) [pid 7133] close(15) = -1 EBADF (Bad file descriptor) [pid 7133] close(16) = -1 EBADF (Bad file descriptor) [pid 7133] close(17) = -1 EBADF (Bad file descriptor) [pid 7133] close(18) = -1 EBADF (Bad file descriptor) [pid 7133] close(19) = -1 EBADF (Bad file descriptor) [pid 7133] close(20) = -1 EBADF (Bad file descriptor) [pid 7133] close(21) = -1 EBADF (Bad file descriptor) [pid 7133] close(22) = -1 EBADF (Bad file descriptor) [pid 7133] close(23) = -1 EBADF (Bad file descriptor) [pid 7133] close(24) = -1 EBADF (Bad file descriptor) [pid 7133] close(25) = -1 EBADF (Bad file descriptor) [pid 7133] close(26) = -1 EBADF (Bad file descriptor) [pid 7133] close(27) = -1 EBADF (Bad file descriptor) [pid 7133] close(28) = -1 EBADF (Bad file descriptor) [pid 7133] close(29) = -1 EBADF (Bad file descriptor) [pid 7133] exit_group(0) = ? [pid 7135] <... futex resumed>) = ? [pid 7134] <... futex resumed>) = ? [pid 7135] +++ exited with 0 +++ [pid 7134] +++ exited with 0 +++ [pid 7133] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2091, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./703", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./703", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./703/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./703/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./703/cgroup.cpu") = 0 [pid 5028] umount2("./703/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./703/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./703/binderfs") = 0 [pid 5028] umount2("./703/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./703/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./703/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./703/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./703/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./703/file0") = 0 [pid 5028] umount2("./703/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./703/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./703/cgroup") = 0 [pid 5028] umount2("./703/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./703/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./703/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./703") = 0 [pid 5028] mkdir("./704", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2094 ./strace-static-x86_64: Process 7136 attached [pid 7136] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7136] chdir("./704") = 0 [pid 7136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7136] setpgid(0, 0) = 0 [pid 7136] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7136] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7136] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7136] write(3, "1000", 4) = 4 [pid 7136] close(3) = 0 [pid 7136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7136] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7136] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7136] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7136] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7137 attached [pid 7137] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7136] <... clone3 resumed> => {parent_tid=[2095]}, 88) = 2095 [pid 7137] set_robust_list(0x7feeffcce9a0, 24 [pid 7136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7136] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7136] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7137] <... set_robust_list resumed>) = 0 [pid 7137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7137] memfd_create("syzkaller", 0) = 3 [pid 7137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7137] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7137] munmap(0x7feef78ae000, 2097152) = 0 [pid 7137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7137] close(3) = 0 [pid 7137] mkdir("./file0", 0777) = 0 [pid 7137] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7137] chdir("./file0") = 0 [pid 7137] ioctl(4, LOOP_CLR_FD) = 0 [pid 7137] close(4) = 0 [pid 7137] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7136] <... futex resumed>) = 0 [pid 7137] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7136] <... futex resumed>) = 0 [pid 7137] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7136] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7137] <... openat resumed>) = 4 [pid 7137] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7136] <... futex resumed>) = 0 [pid 7137] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7136] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7137] <... openat resumed>) = 5 [pid 7136] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7137] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7137] <... futex resumed>) = 0 [pid 7136] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7137] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7136] <... futex resumed>) = 0 [ 227.588995][ T7137] loop0: detected capacity change from 0 to 4096 [ 227.598947][ T7137] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 227.632044][ T7137] ntfs: volume version 3.1. [pid 7136] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7136] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7136] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7138 attached => {parent_tid=[2096]}, 88) = 2096 [pid 7138] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7138] set_robust_list(0x7feef7aad9a0, 24 [pid 7136] rt_sigprocmask(SIG_SETMASK, [], [pid 7138] <... set_robust_list resumed>) = 0 [pid 7136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7138] rt_sigprocmask(SIG_SETMASK, [], [pid 7136] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7136] <... futex resumed>) = 0 [pid 7138] ftruncate(4, 0 [pid 7136] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7138] <... ftruncate resumed>) = 0 [pid 7138] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7137] <... write resumed>) = 1048064 [pid 7137] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7136] <... futex resumed>) = 0 [pid 7137] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] close(3) = 0 [pid 7136] close(4) = 0 [pid 7136] close(5) = 0 [pid 7136] close(6 [pid 7138] <... futex resumed>) = 1 [pid 7136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7136] close(7 [pid 7138] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7136] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7136] close(8) = -1 EBADF (Bad file descriptor) [pid 7136] close(9) = -1 EBADF (Bad file descriptor) [pid 7136] close(10) = -1 EBADF (Bad file descriptor) [pid 7136] close(11) = -1 EBADF (Bad file descriptor) [pid 7136] close(12) = -1 EBADF (Bad file descriptor) [pid 7136] close(13) = -1 EBADF (Bad file descriptor) [pid 7136] close(14) = -1 EBADF (Bad file descriptor) [pid 7136] close(15) = -1 EBADF (Bad file descriptor) [pid 7136] close(16) = -1 EBADF (Bad file descriptor) [pid 7136] close(17) = -1 EBADF (Bad file descriptor) [pid 7136] close(18) = -1 EBADF (Bad file descriptor) [pid 7136] close(19) = -1 EBADF (Bad file descriptor) [pid 7136] close(20) = -1 EBADF (Bad file descriptor) [pid 7136] close(21) = -1 EBADF (Bad file descriptor) [pid 7136] close(22) = -1 EBADF (Bad file descriptor) [pid 7136] close(23) = -1 EBADF (Bad file descriptor) [pid 7136] close(24) = -1 EBADF (Bad file descriptor) [pid 7136] close(25) = -1 EBADF (Bad file descriptor) [pid 7136] close(26) = -1 EBADF (Bad file descriptor) [pid 7136] close(27) = -1 EBADF (Bad file descriptor) [pid 7136] close(28) = -1 EBADF (Bad file descriptor) [pid 7136] close(29) = -1 EBADF (Bad file descriptor) [pid 7136] exit_group(0 [pid 7138] <... futex resumed>) = ? [pid 7137] <... futex resumed>) = ? [pid 7138] +++ exited with 0 +++ [pid 7136] <... exit_group resumed>) = ? [pid 7137] +++ exited with 0 +++ [pid 7136] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2094, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./704", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./704", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./704/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./704/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./704/cgroup.cpu") = 0 [pid 5028] umount2("./704/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./704/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./704/binderfs") = 0 [pid 5028] umount2("./704/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./704/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./704/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./704/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./704/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./704/file0") = 0 [pid 5028] umount2("./704/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./704/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./704/cgroup") = 0 [pid 5028] umount2("./704/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./704/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./704/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./704") = 0 [pid 5028] mkdir("./705", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7139 attached , child_tidptr=0x5555563a5690) = 2097 [pid 7139] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7139] chdir("./705") = 0 [pid 7139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7139] setpgid(0, 0) = 0 [pid 7139] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7139] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7139] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7139] write(3, "1000", 4) = 4 [pid 7139] close(3) = 0 [pid 7139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7139] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7139] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7139] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7139] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7139] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7139] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7140 attached [pid 7140] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7139] <... clone3 resumed> => {parent_tid=[2098]}, 88) = 2098 [pid 7140] <... rseq resumed>) = 0 [pid 7139] rt_sigprocmask(SIG_SETMASK, [], [pid 7140] set_robust_list(0x7feeffcce9a0, 24 [pid 7139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7140] <... set_robust_list resumed>) = 0 [pid 7140] rt_sigprocmask(SIG_SETMASK, [], [pid 7139] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7139] <... futex resumed>) = 0 [pid 7139] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7140] memfd_create("syzkaller", 0) = 3 [pid 7140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7140] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7140] munmap(0x7feef78ae000, 2097152) = 0 [pid 7140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7140] close(3) = 0 [pid 7140] mkdir("./file0", 0777) = 0 [pid 7140] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7140] chdir("./file0") = 0 [pid 7140] ioctl(4, LOOP_CLR_FD) = 0 [pid 7140] close(4) = 0 [pid 7140] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7139] <... futex resumed>) = 0 [pid 7140] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7139] <... futex resumed>) = 0 [pid 7140] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7139] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7140] <... openat resumed>) = 4 [pid 7140] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] <... futex resumed>) = 0 [pid 7139] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7139] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7140] <... futex resumed>) = 1 [pid 7140] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7140] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] <... futex resumed>) = 0 [pid 7139] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7139] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7140] <... futex resumed>) = 1 [ 227.818177][ T7140] loop0: detected capacity change from 0 to 4096 [ 227.827828][ T7140] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 227.860636][ T7140] ntfs: volume version 3.1. [pid 7140] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7139] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7139] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7139] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7139] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7139] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7139] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7139] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7141 attached [pid 7141] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7139] <... clone3 resumed> => {parent_tid=[2099]}, 88) = 2099 [pid 7141] <... rseq resumed>) = 0 [pid 7139] rt_sigprocmask(SIG_SETMASK, [], [pid 7141] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7141] rt_sigprocmask(SIG_SETMASK, [], [pid 7139] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7141] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7139] <... futex resumed>) = 0 [pid 7141] ftruncate(4, 0 [pid 7139] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7141] <... ftruncate resumed>) = 0 [pid 7140] <... write resumed>) = 1048064 [pid 7141] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7140] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7139] <... futex resumed>) = 0 [pid 7141] <... futex resumed>) = 1 [pid 7139] close(3) = 0 [pid 7139] close(4 [pid 7141] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] <... close resumed>) = 0 [pid 7139] close(5) = 0 [pid 7139] close(6) = -1 EBADF (Bad file descriptor) [pid 7139] close(7) = -1 EBADF (Bad file descriptor) [pid 7139] close(8) = -1 EBADF (Bad file descriptor) [pid 7139] close(9) = -1 EBADF (Bad file descriptor) [pid 7139] close(10) = -1 EBADF (Bad file descriptor) [pid 7139] close(11) = -1 EBADF (Bad file descriptor) [pid 7139] close(12 [pid 7140] <... futex resumed>) = 0 [pid 7139] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7140] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7139] close(13) = -1 EBADF (Bad file descriptor) [pid 7139] close(14) = -1 EBADF (Bad file descriptor) [pid 7139] close(15) = -1 EBADF (Bad file descriptor) [pid 7139] close(16) = -1 EBADF (Bad file descriptor) [pid 7139] close(17) = -1 EBADF (Bad file descriptor) [pid 7139] close(18) = -1 EBADF (Bad file descriptor) [pid 7139] close(19) = -1 EBADF (Bad file descriptor) [pid 7139] close(20) = -1 EBADF (Bad file descriptor) [pid 7139] close(21) = -1 EBADF (Bad file descriptor) [pid 7139] close(22) = -1 EBADF (Bad file descriptor) [pid 7139] close(23) = -1 EBADF (Bad file descriptor) [pid 7139] close(24) = -1 EBADF (Bad file descriptor) [pid 7139] close(25) = -1 EBADF (Bad file descriptor) [pid 7139] close(26) = -1 EBADF (Bad file descriptor) [pid 7139] close(27) = -1 EBADF (Bad file descriptor) [pid 7139] close(28) = -1 EBADF (Bad file descriptor) [pid 7139] close(29) = -1 EBADF (Bad file descriptor) [pid 7139] exit_group(0) = ? [pid 7140] <... futex resumed>) = ? [pid 7141] <... futex resumed>) = ? [pid 7140] +++ exited with 0 +++ [pid 7141] +++ exited with 0 +++ [pid 7139] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2097, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./705", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./705", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./705/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./705/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./705/cgroup.cpu") = 0 [pid 5028] umount2("./705/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./705/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./705/binderfs") = 0 [pid 5028] umount2("./705/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./705/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./705/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./705/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./705/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./705/file0") = 0 [pid 5028] umount2("./705/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./705/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./705/cgroup") = 0 [pid 5028] umount2("./705/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./705/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./705/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./705") = 0 [pid 5028] mkdir("./706", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7142 attached [pid 7142] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2100 [pid 7142] <... set_robust_list resumed>) = 0 [pid 7142] chdir("./706") = 0 [pid 7142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7142] setpgid(0, 0) = 0 [pid 7142] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7142] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7142] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7142] write(3, "1000", 4) = 4 [pid 7142] close(3) = 0 [pid 7142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7142] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7142] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7142] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7142] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7142] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7143 attached => {parent_tid=[2101]}, 88) = 2101 [pid 7143] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7142] rt_sigprocmask(SIG_SETMASK, [], [pid 7143] <... rseq resumed>) = 0 [pid 7142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7143] set_robust_list(0x7feeffcce9a0, 24 [pid 7142] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] <... set_robust_list resumed>) = 0 [pid 7142] <... futex resumed>) = 0 [pid 7143] rt_sigprocmask(SIG_SETMASK, [], [pid 7142] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7143] memfd_create("syzkaller", 0) = 3 [pid 7143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7143] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7143] munmap(0x7feef78ae000, 2097152) = 0 [pid 7143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7143] close(3) = 0 [pid 7143] mkdir("./file0", 0777) = 0 [pid 7143] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7143] chdir("./file0") = 0 [pid 7143] ioctl(4, LOOP_CLR_FD) = 0 [pid 7143] close(4) = 0 [pid 7143] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7142] <... futex resumed>) = 0 [pid 7143] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7142] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7142] <... futex resumed>) = 0 [pid 7143] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7142] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7143] <... openat resumed>) = 4 [pid 7143] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7142] <... futex resumed>) = 0 [pid 7143] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7142] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7142] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7143] <... openat resumed>) = 5 [pid 7143] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7142] <... futex resumed>) = 0 [pid 7143] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7142] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7142] <... futex resumed>) = 0 [ 228.056995][ T7143] loop0: detected capacity change from 0 to 4096 [ 228.066197][ T7143] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 228.098811][ T7143] ntfs: volume version 3.1. [pid 7142] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7142] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7142] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7142] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7142] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7144 attached => {parent_tid=[2102]}, 88) = 2102 [pid 7144] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7142] rt_sigprocmask(SIG_SETMASK, [], [pid 7144] <... rseq resumed>) = 0 [pid 7142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7142] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7144] set_robust_list(0x7feef7aad9a0, 24 [pid 7142] <... futex resumed>) = 0 [pid 7144] <... set_robust_list resumed>) = 0 [pid 7142] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7144] ftruncate(4, 0) = 0 [pid 7143] <... write resumed>) = 1048064 [pid 7144] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7143] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7144] <... futex resumed>) = 1 [pid 7142] <... futex resumed>) = 0 [pid 7144] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7143] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7142] close(3) = 0 [pid 7142] close(4) = 0 [pid 7142] close(5) = 0 [pid 7142] close(6) = -1 EBADF (Bad file descriptor) [pid 7142] close(7) = -1 EBADF (Bad file descriptor) [pid 7142] close(8) = -1 EBADF (Bad file descriptor) [pid 7142] close(9) = -1 EBADF (Bad file descriptor) [pid 7142] close(10) = -1 EBADF (Bad file descriptor) [pid 7142] close(11) = -1 EBADF (Bad file descriptor) [pid 7142] close(12) = -1 EBADF (Bad file descriptor) [pid 7142] close(13) = -1 EBADF (Bad file descriptor) [pid 7142] close(14) = -1 EBADF (Bad file descriptor) [pid 7142] close(15) = -1 EBADF (Bad file descriptor) [pid 7142] close(16) = -1 EBADF (Bad file descriptor) [pid 7142] close(17) = -1 EBADF (Bad file descriptor) [pid 7142] close(18) = -1 EBADF (Bad file descriptor) [pid 7142] close(19) = -1 EBADF (Bad file descriptor) [pid 7142] close(20) = -1 EBADF (Bad file descriptor) [pid 7142] close(21) = -1 EBADF (Bad file descriptor) [pid 7142] close(22) = -1 EBADF (Bad file descriptor) [pid 7142] close(23) = -1 EBADF (Bad file descriptor) [pid 7142] close(24) = -1 EBADF (Bad file descriptor) [pid 7142] close(25) = -1 EBADF (Bad file descriptor) [pid 7142] close(26) = -1 EBADF (Bad file descriptor) [pid 7142] close(27) = -1 EBADF (Bad file descriptor) [pid 7142] close(28) = -1 EBADF (Bad file descriptor) [pid 7142] close(29) = -1 EBADF (Bad file descriptor) [pid 7142] exit_group(0 [pid 7144] <... futex resumed>) = ? [pid 7143] <... futex resumed>) = ? [pid 7144] +++ exited with 0 +++ [pid 7142] <... exit_group resumed>) = ? [pid 7143] +++ exited with 0 +++ [pid 7142] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2100, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./706", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./706", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./706/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./706/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./706/cgroup.cpu") = 0 [pid 5028] umount2("./706/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./706/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./706/binderfs") = 0 [pid 5028] umount2("./706/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./706/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./706/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./706/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./706/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./706/file0") = 0 [pid 5028] umount2("./706/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./706/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./706/cgroup") = 0 [pid 5028] umount2("./706/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./706/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./706/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./706") = 0 [pid 5028] mkdir("./707", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7145 attached , child_tidptr=0x5555563a5690) = 2103 [pid 7145] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7145] chdir("./707") = 0 [pid 7145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7145] setpgid(0, 0) = 0 [pid 7145] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7145] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7145] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7145] write(3, "1000", 4) = 4 [pid 7145] close(3) = 0 [pid 7145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7145] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7145] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7145] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2104]}, 88) = 2104 [pid 7145] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7145] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7146 attached [pid 7146] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7146] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7146] memfd_create("syzkaller", 0) = 3 [pid 7146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7146] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7146] munmap(0x7feef78ae000, 2097152) = 0 [pid 7146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7146] close(3) = 0 [pid 7146] mkdir("./file0", 0777) = 0 [pid 7146] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7146] chdir("./file0") = 0 [pid 7146] ioctl(4, LOOP_CLR_FD) = 0 [pid 7146] close(4) = 0 [pid 7146] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7145] <... futex resumed>) = 0 [pid 7145] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7146] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7145] <... futex resumed>) = 0 [pid 7145] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7146] <... openat resumed>) = 4 [pid 7146] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7146] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7145] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7146] <... futex resumed>) = 0 [pid 7146] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7145] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7146] <... openat resumed>) = 5 [pid 7146] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7145] <... futex resumed>) = 0 [pid 7145] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7146] <... futex resumed>) = 1 [pid 7145] <... futex resumed>) = 0 [pid 7146] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 228.295678][ T7146] loop0: detected capacity change from 0 to 4096 [ 228.305700][ T7146] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 228.336730][ T7146] ntfs: volume version 3.1. [pid 7145] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7145] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7145] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7147 attached [pid 7147] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7145] <... clone3 resumed> => {parent_tid=[2105]}, 88) = 2105 [pid 7147] <... rseq resumed>) = 0 [pid 7145] rt_sigprocmask(SIG_SETMASK, [], [pid 7147] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7147] rt_sigprocmask(SIG_SETMASK, [], [pid 7145] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7147] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7147] ftruncate(4, 0 [pid 7145] <... futex resumed>) = 0 [pid 7145] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7147] <... ftruncate resumed>) = 0 [pid 7147] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7146] <... write resumed>) = 1048064 [pid 7145] <... futex resumed>) = 0 [pid 7147] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7146] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7145] close(3 [pid 7146] <... futex resumed>) = 0 [pid 7145] <... close resumed>) = 0 [pid 7146] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7145] close(4) = 0 [pid 7145] close(5) = 0 [pid 7145] close(6) = -1 EBADF (Bad file descriptor) [pid 7145] close(7) = -1 EBADF (Bad file descriptor) [pid 7145] close(8) = -1 EBADF (Bad file descriptor) [pid 7145] close(9) = -1 EBADF (Bad file descriptor) [pid 7145] close(10) = -1 EBADF (Bad file descriptor) [pid 7145] close(11) = -1 EBADF (Bad file descriptor) [pid 7145] close(12) = -1 EBADF (Bad file descriptor) [pid 7145] close(13) = -1 EBADF (Bad file descriptor) [pid 7145] close(14) = -1 EBADF (Bad file descriptor) [pid 7145] close(15) = -1 EBADF (Bad file descriptor) [pid 7145] close(16) = -1 EBADF (Bad file descriptor) [pid 7145] close(17) = -1 EBADF (Bad file descriptor) [pid 7145] close(18) = -1 EBADF (Bad file descriptor) [pid 7145] close(19) = -1 EBADF (Bad file descriptor) [pid 7145] close(20) = -1 EBADF (Bad file descriptor) [pid 7145] close(21) = -1 EBADF (Bad file descriptor) [pid 7145] close(22) = -1 EBADF (Bad file descriptor) [pid 7145] close(23) = -1 EBADF (Bad file descriptor) [pid 7145] close(24) = -1 EBADF (Bad file descriptor) [pid 7145] close(25) = -1 EBADF (Bad file descriptor) [pid 7145] close(26) = -1 EBADF (Bad file descriptor) [pid 7145] close(27) = -1 EBADF (Bad file descriptor) [pid 7145] close(28) = -1 EBADF (Bad file descriptor) [pid 7145] close(29) = -1 EBADF (Bad file descriptor) [pid 7145] exit_group(0) = ? [pid 7147] <... futex resumed>) = ? [pid 7146] <... futex resumed>) = ? [pid 7147] +++ exited with 0 +++ [pid 7146] +++ exited with 0 +++ [pid 7145] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2103, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./707", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./707", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./707/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./707/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./707/cgroup.cpu") = 0 [pid 5028] umount2("./707/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./707/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./707/binderfs") = 0 [pid 5028] umount2("./707/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./707/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./707/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./707/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./707/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./707/file0") = 0 [pid 5028] umount2("./707/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./707/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./707/cgroup") = 0 [pid 5028] umount2("./707/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./707/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./707/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./707") = 0 [pid 5028] mkdir("./708", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7148 attached , child_tidptr=0x5555563a5690) = 2106 [pid 7148] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7148] chdir("./708") = 0 [pid 7148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7148] setpgid(0, 0) = 0 [pid 7148] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7148] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7148] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7148] write(3, "1000", 4) = 4 [pid 7148] close(3) = 0 [pid 7148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7148] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7148] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7148] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7148] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7148] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7149 attached => {parent_tid=[2107]}, 88) = 2107 [pid 7148] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7148] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7149] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7148] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7149] <... rseq resumed>) = 0 [pid 7149] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7149] memfd_create("syzkaller", 0) = 3 [pid 7149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7149] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7149] munmap(0x7feef78ae000, 2097152) = 0 [pid 7149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7149] close(3) = 0 [pid 7149] mkdir("./file0", 0777) = 0 [pid 7149] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7149] chdir("./file0") = 0 [pid 7149] ioctl(4, LOOP_CLR_FD) = 0 [pid 7149] close(4) = 0 [pid 7149] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7148] <... futex resumed>) = 0 [pid 7149] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7148] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7149] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7148] <... futex resumed>) = 0 [pid 7148] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7149] <... openat resumed>) = 4 [pid 7149] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7149] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7148] <... futex resumed>) = 0 [pid 7148] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7149] <... futex resumed>) = 0 [pid 7148] <... futex resumed>) = 1 [pid 7149] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7149] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7148] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7149] <... futex resumed>) = 0 [pid 7148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7149] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7148] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 228.531163][ T7149] loop0: detected capacity change from 0 to 4096 [ 228.540305][ T7149] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 228.573416][ T7149] ntfs: volume version 3.1. [pid 7148] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7148] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7148] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7148] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7150 attached [pid 7150] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7148] <... clone3 resumed> => {parent_tid=[2108]}, 88) = 2108 [pid 7148] rt_sigprocmask(SIG_SETMASK, [], [pid 7150] <... rseq resumed>) = 0 [pid 7150] set_robust_list(0x7feef7aad9a0, 24 [pid 7148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7148] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7150] <... set_robust_list resumed>) = 0 [pid 7150] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7150] ftruncate(4, 0 [pid 7148] <... futex resumed>) = 0 [pid 7148] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7150] <... ftruncate resumed>) = 0 [pid 7150] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7148] <... futex resumed>) = 0 [pid 7150] <... futex resumed>) = 1 [pid 7150] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7149] <... write resumed>) = 1048064 [pid 7149] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7148] close(3) = 0 [pid 7148] close(4) = 0 [pid 7148] close(5) = 0 [pid 7148] close(6) = -1 EBADF (Bad file descriptor) [pid 7148] close(7) = -1 EBADF (Bad file descriptor) [pid 7148] close(8) = -1 EBADF (Bad file descriptor) [pid 7148] close(9) = -1 EBADF (Bad file descriptor) [pid 7148] close(10) = -1 EBADF (Bad file descriptor) [pid 7148] close(11) = -1 EBADF (Bad file descriptor) [pid 7148] close(12) = -1 EBADF (Bad file descriptor) [pid 7149] <... futex resumed>) = 0 [pid 7148] close(13 [pid 7149] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7148] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7148] close(14) = -1 EBADF (Bad file descriptor) [pid 7148] close(15) = -1 EBADF (Bad file descriptor) [pid 7148] close(16) = -1 EBADF (Bad file descriptor) [pid 7148] close(17) = -1 EBADF (Bad file descriptor) [pid 7148] close(18) = -1 EBADF (Bad file descriptor) [pid 7148] close(19) = -1 EBADF (Bad file descriptor) [pid 7148] close(20) = -1 EBADF (Bad file descriptor) [pid 7148] close(21) = -1 EBADF (Bad file descriptor) [pid 7148] close(22) = -1 EBADF (Bad file descriptor) [pid 7148] close(23) = -1 EBADF (Bad file descriptor) [pid 7148] close(24) = -1 EBADF (Bad file descriptor) [pid 7148] close(25) = -1 EBADF (Bad file descriptor) [pid 7148] close(26) = -1 EBADF (Bad file descriptor) [pid 7148] close(27) = -1 EBADF (Bad file descriptor) [pid 7148] close(28) = -1 EBADF (Bad file descriptor) [pid 7148] close(29) = -1 EBADF (Bad file descriptor) [pid 7148] exit_group(0 [pid 7150] <... futex resumed>) = ? [pid 7148] <... exit_group resumed>) = ? [pid 7149] <... futex resumed>) = ? [pid 7149] +++ exited with 0 +++ [pid 7150] +++ exited with 0 +++ [pid 7148] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2106, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./708", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./708", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./708/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./708/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./708/cgroup.cpu") = 0 [pid 5028] umount2("./708/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./708/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./708/binderfs") = 0 [pid 5028] umount2("./708/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./708/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./708/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./708/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./708/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./708/file0") = 0 [pid 5028] umount2("./708/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./708/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./708/cgroup") = 0 [pid 5028] umount2("./708/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./708/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./708/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./708") = 0 [pid 5028] mkdir("./709", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7151 attached , child_tidptr=0x5555563a5690) = 2109 [pid 7151] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7151] chdir("./709") = 0 [pid 7151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7151] setpgid(0, 0) = 0 [pid 7151] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7151] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7151] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7151] write(3, "1000", 4) = 4 [pid 7151] close(3) = 0 [pid 7151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7151] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7151] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7151] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7151] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7152 attached [pid 7152] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7151] <... clone3 resumed> => {parent_tid=[2110]}, 88) = 2110 [pid 7152] <... rseq resumed>) = 0 [pid 7151] rt_sigprocmask(SIG_SETMASK, [], [pid 7152] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7151] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] memfd_create("syzkaller", 0 [pid 7151] <... futex resumed>) = 0 [pid 7151] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7152] <... memfd_create resumed>) = 3 [pid 7152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7152] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7152] munmap(0x7feef78ae000, 2097152) = 0 [pid 7152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7152] close(3) = 0 [pid 7152] mkdir("./file0", 0777) = 0 [pid 7152] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7152] chdir("./file0") = 0 [pid 7152] ioctl(4, LOOP_CLR_FD) = 0 [pid 7152] close(4) = 0 [pid 7152] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7151] <... futex resumed>) = 0 [pid 7152] <... futex resumed>) = 1 [pid 7151] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7151] <... futex resumed>) = 0 [pid 7151] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7152] <... openat resumed>) = 4 [pid 7152] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7152] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7151] <... futex resumed>) = 0 [pid 7151] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] <... futex resumed>) = 0 [pid 7151] <... futex resumed>) = 1 [pid 7152] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7151] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7152] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7152] <... futex resumed>) = 0 [pid 7151] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7151] <... futex resumed>) = 0 [ 228.775373][ T7152] loop0: detected capacity change from 0 to 4096 [ 228.797158][ T7152] ntfs: volume version 3.1. [pid 7151] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7151] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7151] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7153 attached [pid 7153] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7151] <... clone3 resumed> => {parent_tid=[2111]}, 88) = 2111 [pid 7153] <... rseq resumed>) = 0 [pid 7151] rt_sigprocmask(SIG_SETMASK, [], [pid 7153] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7153] rt_sigprocmask(SIG_SETMASK, [], [pid 7151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7151] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7153] ftruncate(4, 0 [pid 7151] <... futex resumed>) = 0 [pid 7151] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7153] <... ftruncate resumed>) = 0 [pid 7153] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7152] <... write resumed>) = 1048064 [pid 7153] <... futex resumed>) = 1 [pid 7152] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7151] <... futex resumed>) = 0 [pid 7153] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7152] <... futex resumed>) = 0 [pid 7151] close(3 [pid 7152] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7151] <... close resumed>) = 0 [pid 7151] close(4) = 0 [pid 7151] close(5) = 0 [pid 7151] close(6) = -1 EBADF (Bad file descriptor) [pid 7151] close(7) = -1 EBADF (Bad file descriptor) [pid 7151] close(8) = -1 EBADF (Bad file descriptor) [pid 7151] close(9) = -1 EBADF (Bad file descriptor) [pid 7151] close(10) = -1 EBADF (Bad file descriptor) [pid 7151] close(11) = -1 EBADF (Bad file descriptor) [pid 7151] close(12) = -1 EBADF (Bad file descriptor) [pid 7151] close(13) = -1 EBADF (Bad file descriptor) [pid 7151] close(14) = -1 EBADF (Bad file descriptor) [pid 7151] close(15) = -1 EBADF (Bad file descriptor) [pid 7151] close(16) = -1 EBADF (Bad file descriptor) [pid 7151] close(17) = -1 EBADF (Bad file descriptor) [pid 7151] close(18) = -1 EBADF (Bad file descriptor) [pid 7151] close(19) = -1 EBADF (Bad file descriptor) [pid 7151] close(20) = -1 EBADF (Bad file descriptor) [pid 7151] close(21) = -1 EBADF (Bad file descriptor) [pid 7151] close(22) = -1 EBADF (Bad file descriptor) [pid 7151] close(23) = -1 EBADF (Bad file descriptor) [pid 7151] close(24) = -1 EBADF (Bad file descriptor) [pid 7151] close(25) = -1 EBADF (Bad file descriptor) [pid 7151] close(26) = -1 EBADF (Bad file descriptor) [pid 7151] close(27) = -1 EBADF (Bad file descriptor) [pid 7151] close(28) = -1 EBADF (Bad file descriptor) [pid 7151] close(29) = -1 EBADF (Bad file descriptor) [pid 7151] exit_group(0) = ? [pid 7153] <... futex resumed>) = ? [pid 7153] +++ exited with 0 +++ [pid 7152] <... futex resumed>) = ? [pid 7152] +++ exited with 0 +++ [pid 7151] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2109, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./709", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./709", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./709/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./709/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./709/cgroup.cpu") = 0 [pid 5028] umount2("./709/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./709/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./709/binderfs") = 0 [pid 5028] umount2("./709/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./709/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./709/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./709/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./709/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./709/file0") = 0 [pid 5028] umount2("./709/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./709/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./709/cgroup") = 0 [pid 5028] umount2("./709/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./709/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./709/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./709") = 0 [pid 5028] mkdir("./710", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7154 attached , child_tidptr=0x5555563a5690) = 2112 [pid 7154] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7154] chdir("./710") = 0 [pid 7154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7154] setpgid(0, 0) = 0 [pid 7154] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7154] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7154] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7154] write(3, "1000", 4) = 4 [pid 7154] close(3) = 0 [pid 7154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7154] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7154] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7154] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7154] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7154] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7155 attached => {parent_tid=[2113]}, 88) = 2113 [pid 7154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7154] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7155] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7154] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7155] <... rseq resumed>) = 0 [pid 7155] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7155] memfd_create("syzkaller", 0) = 3 [pid 7155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7155] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7155] munmap(0x7feef78ae000, 2097152) = 0 [pid 7155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7155] close(3) = 0 [pid 7155] mkdir("./file0", 0777) = 0 [pid 7155] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7155] chdir("./file0") = 0 [pid 7155] ioctl(4, LOOP_CLR_FD) = 0 [pid 7155] close(4) = 0 [pid 7155] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7154] <... futex resumed>) = 0 [pid 7155] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7154] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7154] <... futex resumed>) = 0 [pid 7155] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7154] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] <... openat resumed>) = 4 [pid 7155] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7155] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7154] <... futex resumed>) = 0 [pid 7154] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... futex resumed>) = 0 [pid 7154] <... futex resumed>) = 1 [pid 7155] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7154] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7155] <... openat resumed>) = 5 [pid 7155] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7154] <... futex resumed>) = 0 [pid 7155] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7154] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7154] <... futex resumed>) = 0 [pid 7155] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 229.011045][ T7155] loop0: detected capacity change from 0 to 4096 [ 229.032979][ T7155] ntfs: volume version 3.1. [pid 7154] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7154] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7154] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7154] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7156 attached => {parent_tid=[2114]}, 88) = 2114 [pid 7154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7154] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7156] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7154] <... futex resumed>) = 0 [pid 7156] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7154] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7156] ftruncate(4, 0) = 0 [pid 7156] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7155] <... write resumed>) = 1048064 [pid 7156] <... futex resumed>) = 1 [pid 7156] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7155] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7154] <... futex resumed>) = 0 [pid 7155] <... futex resumed>) = 0 [pid 7154] close(3 [pid 7155] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7154] <... close resumed>) = 0 [pid 7154] close(4) = 0 [pid 7154] close(5) = 0 [pid 7154] close(6) = -1 EBADF (Bad file descriptor) [pid 7154] close(7) = -1 EBADF (Bad file descriptor) [pid 7154] close(8) = -1 EBADF (Bad file descriptor) [pid 7154] close(9) = -1 EBADF (Bad file descriptor) [pid 7154] close(10) = -1 EBADF (Bad file descriptor) [pid 7154] close(11) = -1 EBADF (Bad file descriptor) [pid 7154] close(12) = -1 EBADF (Bad file descriptor) [pid 7154] close(13) = -1 EBADF (Bad file descriptor) [pid 7154] close(14) = -1 EBADF (Bad file descriptor) [pid 7154] close(15) = -1 EBADF (Bad file descriptor) [pid 7154] close(16) = -1 EBADF (Bad file descriptor) [pid 7154] close(17) = -1 EBADF (Bad file descriptor) [pid 7154] close(18) = -1 EBADF (Bad file descriptor) [pid 7154] close(19) = -1 EBADF (Bad file descriptor) [pid 7154] close(20) = -1 EBADF (Bad file descriptor) [pid 7154] close(21) = -1 EBADF (Bad file descriptor) [pid 7154] close(22) = -1 EBADF (Bad file descriptor) [pid 7154] close(23) = -1 EBADF (Bad file descriptor) [pid 7154] close(24) = -1 EBADF (Bad file descriptor) [pid 7154] close(25) = -1 EBADF (Bad file descriptor) [pid 7154] close(26) = -1 EBADF (Bad file descriptor) [pid 7154] close(27) = -1 EBADF (Bad file descriptor) [pid 7154] close(28) = -1 EBADF (Bad file descriptor) [pid 7154] close(29) = -1 EBADF (Bad file descriptor) [pid 7154] exit_group(0 [pid 7155] <... futex resumed>) = ? [pid 7154] <... exit_group resumed>) = ? [pid 7156] <... futex resumed>) = ? [pid 7155] +++ exited with 0 +++ [pid 7156] +++ exited with 0 +++ [pid 7154] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2112, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./710", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./710", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./710/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./710/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./710/cgroup.cpu") = 0 [pid 5028] umount2("./710/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./710/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./710/binderfs") = 0 [pid 5028] umount2("./710/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./710/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./710/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./710/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./710/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./710/file0") = 0 [pid 5028] umount2("./710/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./710/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./710/cgroup") = 0 [pid 5028] umount2("./710/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./710/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./710/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./710") = 0 [pid 5028] mkdir("./711", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7157 attached , child_tidptr=0x5555563a5690) = 2115 [pid 7157] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7157] chdir("./711") = 0 [pid 7157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7157] setpgid(0, 0) = 0 [pid 7157] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7157] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7157] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7157] write(3, "1000", 4) = 4 [pid 7157] close(3) = 0 [pid 7157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7157] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7157] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7157] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7157] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7157] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7157] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2116]}, 88) = 2116 ./strace-static-x86_64: Process 7158 attached [pid 7157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7157] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7157] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7158] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7158] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7158] memfd_create("syzkaller", 0) = 3 [pid 7158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7158] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7158] munmap(0x7feef78ae000, 2097152) = 0 [pid 7158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7158] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7158] close(3) = 0 [pid 7158] mkdir("./file0", 0777) = 0 [pid 7158] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7158] chdir("./file0") = 0 [pid 7158] ioctl(4, LOOP_CLR_FD) = 0 [pid 7158] close(4) = 0 [pid 7158] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7157] <... futex resumed>) = 0 [pid 7158] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7157] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7157] <... futex resumed>) = 0 [pid 7157] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7158] <... openat resumed>) = 4 [pid 7158] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] <... futex resumed>) = 0 [pid 7158] <... futex resumed>) = 1 [pid 7157] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7157] <... futex resumed>) = 0 [pid 7158] <... openat resumed>) = 5 [pid 7157] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7158] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7157] <... futex resumed>) = 0 [pid 7158] <... futex resumed>) = 1 [pid 7157] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7157] <... futex resumed>) = 0 [ 229.217195][ T7158] loop0: detected capacity change from 0 to 4096 [ 229.238729][ T7158] ntfs: volume version 3.1. [pid 7157] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7157] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7157] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7157] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7157] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7159 attached => {parent_tid=[2117]}, 88) = 2117 [pid 7159] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7157] rt_sigprocmask(SIG_SETMASK, [], [pid 7159] set_robust_list(0x7feef7aad9a0, 24 [pid 7157] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7159] <... set_robust_list resumed>) = 0 [pid 7157] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7159] rt_sigprocmask(SIG_SETMASK, [], [pid 7157] <... futex resumed>) = 0 [pid 7159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7157] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7159] ftruncate(4, 0) = 0 [pid 7159] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7158] <... write resumed>) = 1048064 [pid 7157] <... futex resumed>) = 0 [pid 7159] <... futex resumed>) = 1 [pid 7159] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7158] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7158] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7157] close(3) = 0 [pid 7157] close(4) = 0 [pid 7157] close(5) = 0 [pid 7157] close(6) = -1 EBADF (Bad file descriptor) [pid 7157] close(7) = -1 EBADF (Bad file descriptor) [pid 7157] close(8) = -1 EBADF (Bad file descriptor) [pid 7157] close(9) = -1 EBADF (Bad file descriptor) [pid 7157] close(10) = -1 EBADF (Bad file descriptor) [pid 7157] close(11) = -1 EBADF (Bad file descriptor) [pid 7157] close(12) = -1 EBADF (Bad file descriptor) [pid 7157] close(13) = -1 EBADF (Bad file descriptor) [pid 7157] close(14) = -1 EBADF (Bad file descriptor) [pid 7157] close(15) = -1 EBADF (Bad file descriptor) [pid 7157] close(16) = -1 EBADF (Bad file descriptor) [pid 7157] close(17) = -1 EBADF (Bad file descriptor) [pid 7157] close(18) = -1 EBADF (Bad file descriptor) [pid 7157] close(19) = -1 EBADF (Bad file descriptor) [pid 7157] close(20) = -1 EBADF (Bad file descriptor) [pid 7157] close(21) = -1 EBADF (Bad file descriptor) [pid 7157] close(22) = -1 EBADF (Bad file descriptor) [pid 7157] close(23) = -1 EBADF (Bad file descriptor) [pid 7157] close(24) = -1 EBADF (Bad file descriptor) [pid 7157] close(25) = -1 EBADF (Bad file descriptor) [pid 7157] close(26) = -1 EBADF (Bad file descriptor) [pid 7157] close(27) = -1 EBADF (Bad file descriptor) [pid 7157] close(28) = -1 EBADF (Bad file descriptor) [pid 7157] close(29) = -1 EBADF (Bad file descriptor) [pid 7157] exit_group(0 [pid 7159] <... futex resumed>) = ? [pid 7158] <... futex resumed>) = ? [pid 7157] <... exit_group resumed>) = ? [pid 7158] +++ exited with 0 +++ [pid 7159] +++ exited with 0 +++ [pid 7157] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2115, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./711", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./711", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./711/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./711/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./711/cgroup.cpu") = 0 [pid 5028] umount2("./711/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./711/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./711/binderfs") = 0 [pid 5028] umount2("./711/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./711/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./711/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./711/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./711/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./711/file0") = 0 [pid 5028] umount2("./711/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./711/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./711/cgroup") = 0 [pid 5028] umount2("./711/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./711/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./711/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./711") = 0 [pid 5028] mkdir("./712", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7160 attached , child_tidptr=0x5555563a5690) = 2118 [pid 7160] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7160] chdir("./712") = 0 [pid 7160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7160] setpgid(0, 0) = 0 [pid 7160] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7160] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7160] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7160] write(3, "1000", 4) = 4 [pid 7160] close(3) = 0 [pid 7160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7160] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7160] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7160] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7160] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7160] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7160] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2119]}, 88) = 2119 [pid 7160] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7160] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7160] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7161 attached [pid 7161] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7161] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7161] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7161] memfd_create("syzkaller", 0) = 3 [pid 7161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7161] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7161] munmap(0x7feef78ae000, 2097152) = 0 [pid 7161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7161] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7161] close(3) = 0 [pid 7161] mkdir("./file0", 0777) = 0 [pid 7161] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7161] chdir("./file0") = 0 [pid 7161] ioctl(4, LOOP_CLR_FD) = 0 [pid 7161] close(4) = 0 [pid 7161] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7160] <... futex resumed>) = 0 [pid 7161] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7160] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7160] <... futex resumed>) = 0 [pid 7161] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7160] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7161] <... openat resumed>) = 4 [pid 7161] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7161] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7160] <... futex resumed>) = 0 [pid 7160] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7161] <... futex resumed>) = 0 [pid 7160] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7161] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7161] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7161] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7160] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7161] <... futex resumed>) = 0 [pid 7160] <... futex resumed>) = 1 [pid 7161] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 229.454226][ T7161] loop0: detected capacity change from 0 to 4096 [ 229.476434][ T7161] ntfs: volume version 3.1. [pid 7160] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7160] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7160] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7160] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7160] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} [pid 7161] <... write resumed>) = 1048064 [pid 7161] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7162 attached ) = 0 [pid 7160] <... clone3 resumed> => {parent_tid=[2120]}, 88) = 2120 [pid 7162] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7161] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7160] rt_sigprocmask(SIG_SETMASK, [], [pid 7162] <... rseq resumed>) = 0 [pid 7162] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7162] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7160] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7162] <... futex resumed>) = 0 [pid 7160] <... futex resumed>) = 1 [pid 7162] ftruncate(4, 0 [pid 7160] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7162] <... ftruncate resumed>) = 0 [pid 7162] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7162] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7160] <... futex resumed>) = 0 [pid 7160] close(3) = 0 [pid 7160] close(4) = 0 [pid 7160] close(5) = 0 [pid 7160] close(6) = -1 EBADF (Bad file descriptor) [pid 7160] close(7) = -1 EBADF (Bad file descriptor) [pid 7160] close(8) = -1 EBADF (Bad file descriptor) [pid 7160] close(9) = -1 EBADF (Bad file descriptor) [pid 7160] close(10) = -1 EBADF (Bad file descriptor) [pid 7160] close(11) = -1 EBADF (Bad file descriptor) [pid 7160] close(12) = -1 EBADF (Bad file descriptor) [pid 7160] close(13) = -1 EBADF (Bad file descriptor) [pid 7160] close(14) = -1 EBADF (Bad file descriptor) [pid 7160] close(15) = -1 EBADF (Bad file descriptor) [pid 7160] close(16) = -1 EBADF (Bad file descriptor) [pid 7160] close(17) = -1 EBADF (Bad file descriptor) [pid 7160] close(18) = -1 EBADF (Bad file descriptor) [pid 7160] close(19) = -1 EBADF (Bad file descriptor) [pid 7160] close(20) = -1 EBADF (Bad file descriptor) [pid 7160] close(21) = -1 EBADF (Bad file descriptor) [pid 7160] close(22) = -1 EBADF (Bad file descriptor) [pid 7160] close(23) = -1 EBADF (Bad file descriptor) [pid 7160] close(24) = -1 EBADF (Bad file descriptor) [pid 7160] close(25) = -1 EBADF (Bad file descriptor) [pid 7160] close(26) = -1 EBADF (Bad file descriptor) [pid 7160] close(27) = -1 EBADF (Bad file descriptor) [pid 7160] close(28) = -1 EBADF (Bad file descriptor) [pid 7160] close(29) = -1 EBADF (Bad file descriptor) [pid 7160] exit_group(0) = ? [pid 7162] <... futex resumed>) = ? [pid 7161] <... futex resumed>) = ? [pid 7162] +++ exited with 0 +++ [pid 7161] +++ exited with 0 +++ [pid 7160] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2118, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./712", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./712", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./712/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./712/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./712/cgroup.cpu") = 0 [pid 5028] umount2("./712/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./712/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./712/binderfs") = 0 [pid 5028] umount2("./712/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./712/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./712/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./712/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./712/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./712/file0") = 0 [pid 5028] umount2("./712/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./712/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./712/cgroup") = 0 [pid 5028] umount2("./712/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./712/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./712/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./712") = 0 [pid 5028] mkdir("./713", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7163 attached [pid 7163] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2121 [pid 7163] <... set_robust_list resumed>) = 0 [pid 7163] chdir("./713") = 0 [pid 7163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7163] setpgid(0, 0) = 0 [pid 7163] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7163] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7163] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7163] write(3, "1000", 4) = 4 [pid 7163] close(3) = 0 [pid 7163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7163] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7163] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7163] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7163] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7163] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7163] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7164 attached [pid 7164] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7163] <... clone3 resumed> => {parent_tid=[2122]}, 88) = 2122 [pid 7164] <... rseq resumed>) = 0 [pid 7163] rt_sigprocmask(SIG_SETMASK, [], [pid 7164] set_robust_list(0x7feeffcce9a0, 24 [pid 7163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7164] <... set_robust_list resumed>) = 0 [pid 7163] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7163] <... futex resumed>) = 0 [pid 7164] memfd_create("syzkaller", 0 [pid 7163] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7164] <... memfd_create resumed>) = 3 [pid 7164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7164] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7164] munmap(0x7feef78ae000, 2097152) = 0 [pid 7164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7164] close(3) = 0 [pid 7164] mkdir("./file0", 0777) = 0 [pid 7164] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7164] chdir("./file0") = 0 [pid 7164] ioctl(4, LOOP_CLR_FD) = 0 [pid 7164] close(4) = 0 [pid 7164] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7164] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7163] <... futex resumed>) = 0 [pid 7163] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7164] <... futex resumed>) = 0 [pid 7163] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7164] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7164] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7163] <... futex resumed>) = 0 [pid 7164] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7163] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7163] <... futex resumed>) = 0 [pid 7164] <... openat resumed>) = 5 [pid 7163] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7164] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7164] <... futex resumed>) = 0 [pid 7163] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7163] <... futex resumed>) = 0 [ 229.686954][ T7164] loop0: detected capacity change from 0 to 4096 [ 229.709045][ T7164] ntfs: volume version 3.1. [pid 7163] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7163] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7163] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7163] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7163] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7165 attached [pid 7165] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7163] <... clone3 resumed> => {parent_tid=[2123]}, 88) = 2123 [pid 7165] <... rseq resumed>) = 0 [pid 7163] rt_sigprocmask(SIG_SETMASK, [], [pid 7165] set_robust_list(0x7feef7aad9a0, 24 [pid 7163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7165] <... set_robust_list resumed>) = 0 [pid 7163] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7163] <... futex resumed>) = 0 [pid 7165] ftruncate(4, 0 [pid 7163] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7165] <... ftruncate resumed>) = 0 [pid 7165] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7164] <... write resumed>) = 1048064 [pid 7164] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7164] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7163] <... futex resumed>) = 0 [pid 7163] close(3) = 0 [pid 7163] close(4) = 0 [pid 7163] close(5) = 0 [pid 7163] close(6 [pid 7165] <... futex resumed>) = 1 [pid 7163] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7163] close(7 [pid 7165] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7163] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7163] close(8) = -1 EBADF (Bad file descriptor) [pid 7163] close(9) = -1 EBADF (Bad file descriptor) [pid 7163] close(10) = -1 EBADF (Bad file descriptor) [pid 7163] close(11) = -1 EBADF (Bad file descriptor) [pid 7163] close(12) = -1 EBADF (Bad file descriptor) [pid 7163] close(13) = -1 EBADF (Bad file descriptor) [pid 7163] close(14) = -1 EBADF (Bad file descriptor) [pid 7163] close(15) = -1 EBADF (Bad file descriptor) [pid 7163] close(16) = -1 EBADF (Bad file descriptor) [pid 7163] close(17) = -1 EBADF (Bad file descriptor) [pid 7163] close(18) = -1 EBADF (Bad file descriptor) [pid 7163] close(19) = -1 EBADF (Bad file descriptor) [pid 7163] close(20) = -1 EBADF (Bad file descriptor) [pid 7163] close(21) = -1 EBADF (Bad file descriptor) [pid 7163] close(22) = -1 EBADF (Bad file descriptor) [pid 7163] close(23) = -1 EBADF (Bad file descriptor) [pid 7163] close(24) = -1 EBADF (Bad file descriptor) [pid 7163] close(25) = -1 EBADF (Bad file descriptor) [pid 7163] close(26) = -1 EBADF (Bad file descriptor) [pid 7163] close(27) = -1 EBADF (Bad file descriptor) [pid 7163] close(28) = -1 EBADF (Bad file descriptor) [pid 7163] close(29) = -1 EBADF (Bad file descriptor) [pid 7163] exit_group(0 [pid 7164] <... futex resumed>) = ? [pid 7164] +++ exited with 0 +++ [pid 7165] <... futex resumed>) = ? [pid 7163] <... exit_group resumed>) = ? [pid 7165] +++ exited with 0 +++ [pid 7163] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2121, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./713", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./713", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./713/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./713/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./713/cgroup.cpu") = 0 [pid 5028] umount2("./713/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./713/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./713/binderfs") = 0 [pid 5028] umount2("./713/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./713/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./713/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./713/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./713/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./713/file0") = 0 [pid 5028] umount2("./713/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./713/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./713/cgroup") = 0 [pid 5028] umount2("./713/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./713/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./713/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./713") = 0 [pid 5028] mkdir("./714", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7166 attached [pid 7166] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2124 [pid 7166] <... set_robust_list resumed>) = 0 [pid 7166] chdir("./714") = 0 [pid 7166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7166] setpgid(0, 0) = 0 [pid 7166] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7166] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7166] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7166] write(3, "1000", 4) = 4 [pid 7166] close(3) = 0 [pid 7166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7166] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7166] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7166] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7166] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7166] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7167 attached [pid 7167] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7166] <... clone3 resumed> => {parent_tid=[2125]}, 88) = 2125 [pid 7167] <... rseq resumed>) = 0 [pid 7166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7167] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7166] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7166] <... futex resumed>) = 0 [pid 7166] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7167] memfd_create("syzkaller", 0) = 3 [pid 7167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7167] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7167] munmap(0x7feef78ae000, 2097152) = 0 [pid 7167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7167] close(3) = 0 [pid 7167] mkdir("./file0", 0777) = 0 [pid 7167] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7167] chdir("./file0") = 0 [pid 7167] ioctl(4, LOOP_CLR_FD) = 0 [pid 7167] close(4) = 0 [pid 7167] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7167] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] <... futex resumed>) = 0 [pid 7166] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7167] <... futex resumed>) = 0 [pid 7166] <... futex resumed>) = 1 [pid 7167] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7166] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7167] <... openat resumed>) = 4 [pid 7167] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7166] <... futex resumed>) = 0 [pid 7167] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7166] <... futex resumed>) = 0 [pid 7167] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7166] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7167] <... openat resumed>) = 5 [pid 7167] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7167] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] <... futex resumed>) = 0 [pid 7166] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7167] <... futex resumed>) = 0 [pid 7167] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 229.958676][ T7167] loop0: detected capacity change from 0 to 4096 [ 229.980471][ T7167] ntfs: volume version 3.1. [pid 7166] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7166] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7166] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7166] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7168 attached [pid 7168] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7166] <... clone3 resumed> => {parent_tid=[2126]}, 88) = 2126 [pid 7168] <... rseq resumed>) = 0 [pid 7168] set_robust_list(0x7feef7aad9a0, 24 [pid 7166] rt_sigprocmask(SIG_SETMASK, [], [pid 7168] <... set_robust_list resumed>) = 0 [pid 7166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7166] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7168] ftruncate(4, 0 [pid 7166] <... futex resumed>) = 0 [pid 7166] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7168] <... ftruncate resumed>) = 0 [pid 7168] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7167] <... write resumed>) = 1048064 [pid 7166] <... futex resumed>) = 0 [pid 7168] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7167] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7166] close(3 [pid 7167] <... futex resumed>) = 0 [pid 7167] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7166] <... close resumed>) = 0 [pid 7166] close(4) = 0 [pid 7166] close(5) = 0 [pid 7166] close(6) = -1 EBADF (Bad file descriptor) [pid 7166] close(7) = -1 EBADF (Bad file descriptor) [pid 7166] close(8) = -1 EBADF (Bad file descriptor) [pid 7166] close(9) = -1 EBADF (Bad file descriptor) [pid 7166] close(10) = -1 EBADF (Bad file descriptor) [pid 7166] close(11) = -1 EBADF (Bad file descriptor) [pid 7166] close(12) = -1 EBADF (Bad file descriptor) [pid 7166] close(13) = -1 EBADF (Bad file descriptor) [pid 7166] close(14) = -1 EBADF (Bad file descriptor) [pid 7166] close(15) = -1 EBADF (Bad file descriptor) [pid 7166] close(16) = -1 EBADF (Bad file descriptor) [pid 7166] close(17) = -1 EBADF (Bad file descriptor) [pid 7166] close(18) = -1 EBADF (Bad file descriptor) [pid 7166] close(19) = -1 EBADF (Bad file descriptor) [pid 7166] close(20) = -1 EBADF (Bad file descriptor) [pid 7166] close(21) = -1 EBADF (Bad file descriptor) [pid 7166] close(22) = -1 EBADF (Bad file descriptor) [pid 7166] close(23) = -1 EBADF (Bad file descriptor) [pid 7166] close(24) = -1 EBADF (Bad file descriptor) [pid 7166] close(25) = -1 EBADF (Bad file descriptor) [pid 7166] close(26) = -1 EBADF (Bad file descriptor) [pid 7166] close(27) = -1 EBADF (Bad file descriptor) [pid 7166] close(28) = -1 EBADF (Bad file descriptor) [pid 7166] close(29) = -1 EBADF (Bad file descriptor) [pid 7166] exit_group(0) = ? [pid 7167] <... futex resumed>) = ? [pid 7168] <... futex resumed>) = ? [pid 7168] +++ exited with 0 +++ [pid 7167] +++ exited with 0 +++ [pid 7166] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2124, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./714", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./714", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./714/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./714/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./714/cgroup.cpu") = 0 [pid 5028] umount2("./714/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./714/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./714/binderfs") = 0 [pid 5028] umount2("./714/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./714/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./714/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./714/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./714/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./714/file0") = 0 [pid 5028] umount2("./714/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./714/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./714/cgroup") = 0 [pid 5028] umount2("./714/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./714/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./714/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./714") = 0 [pid 5028] mkdir("./715", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7169 attached , child_tidptr=0x5555563a5690) = 2127 [pid 7169] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7169] chdir("./715") = 0 [pid 7169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7169] setpgid(0, 0) = 0 [pid 7169] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7169] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7169] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7169] write(3, "1000", 4) = 4 [pid 7169] close(3) = 0 [pid 7169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7169] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7169] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7169] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7169] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7169] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7170 attached [pid 7170] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7169] <... clone3 resumed> => {parent_tid=[2128]}, 88) = 2128 [pid 7170] <... rseq resumed>) = 0 [pid 7169] rt_sigprocmask(SIG_SETMASK, [], [pid 7170] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7169] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] rt_sigprocmask(SIG_SETMASK, [], [pid 7169] <... futex resumed>) = 0 [pid 7170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7169] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7170] memfd_create("syzkaller", 0) = 3 [pid 7170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7170] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7170] munmap(0x7feef78ae000, 2097152) = 0 [pid 7170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7170] close(3) = 0 [pid 7170] mkdir("./file0", 0777) = 0 [pid 7170] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7170] chdir("./file0") = 0 [pid 7170] ioctl(4, LOOP_CLR_FD) = 0 [pid 7170] close(4) = 0 [pid 7170] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7169] <... futex resumed>) = 0 [pid 7170] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7169] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7169] <... futex resumed>) = 0 [pid 7170] <... openat resumed>) = 4 [pid 7169] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7170] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7169] <... futex resumed>) = 0 [pid 7170] <... futex resumed>) = 1 [pid 7169] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7169] <... futex resumed>) = 0 [pid 7170] <... openat resumed>) = 5 [pid 7169] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7170] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7169] <... futex resumed>) = 0 [pid 7169] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7170] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 230.178016][ T7170] loop0: detected capacity change from 0 to 4096 [ 230.199862][ T7170] ntfs: volume version 3.1. [pid 7169] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7169] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7169] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7169] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7171 attached [pid 7171] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7171] set_robust_list(0x7feef7aad9a0, 24 [pid 7169] <... clone3 resumed> => {parent_tid=[2129]}, 88) = 2129 [pid 7171] <... set_robust_list resumed>) = 0 [pid 7169] rt_sigprocmask(SIG_SETMASK, [], [pid 7171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7171] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7169] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7169] <... futex resumed>) = 0 [pid 7171] ftruncate(4, 0 [pid 7169] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7171] <... ftruncate resumed>) = 0 [pid 7171] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7170] <... write resumed>) = 1048064 [pid 7170] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7171] <... futex resumed>) = 1 [pid 7170] <... futex resumed>) = 0 [pid 7171] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7170] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7169] <... futex resumed>) = 0 [pid 7169] close(3) = 0 [pid 7169] close(4) = 0 [pid 7169] close(5) = 0 [pid 7169] close(6) = -1 EBADF (Bad file descriptor) [pid 7169] close(7) = -1 EBADF (Bad file descriptor) [pid 7169] close(8) = -1 EBADF (Bad file descriptor) [pid 7169] close(9) = -1 EBADF (Bad file descriptor) [pid 7169] close(10) = -1 EBADF (Bad file descriptor) [pid 7169] close(11) = -1 EBADF (Bad file descriptor) [pid 7169] close(12) = -1 EBADF (Bad file descriptor) [pid 7169] close(13) = -1 EBADF (Bad file descriptor) [pid 7169] close(14) = -1 EBADF (Bad file descriptor) [pid 7169] close(15) = -1 EBADF (Bad file descriptor) [pid 7169] close(16) = -1 EBADF (Bad file descriptor) [pid 7169] close(17) = -1 EBADF (Bad file descriptor) [pid 7169] close(18) = -1 EBADF (Bad file descriptor) [pid 7169] close(19) = -1 EBADF (Bad file descriptor) [pid 7169] close(20) = -1 EBADF (Bad file descriptor) [pid 7169] close(21) = -1 EBADF (Bad file descriptor) [pid 7169] close(22) = -1 EBADF (Bad file descriptor) [pid 7169] close(23) = -1 EBADF (Bad file descriptor) [pid 7169] close(24) = -1 EBADF (Bad file descriptor) [pid 7169] close(25) = -1 EBADF (Bad file descriptor) [pid 7169] close(26) = -1 EBADF (Bad file descriptor) [pid 7169] close(27) = -1 EBADF (Bad file descriptor) [pid 7169] close(28) = -1 EBADF (Bad file descriptor) [pid 7169] close(29) = -1 EBADF (Bad file descriptor) [pid 7169] exit_group(0) = ? [pid 7171] <... futex resumed>) = ? [pid 7170] <... futex resumed>) = ? [pid 7171] +++ exited with 0 +++ [pid 7170] +++ exited with 0 +++ [pid 7169] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2127, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./715", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./715", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./715/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./715/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./715/cgroup.cpu") = 0 [pid 5028] umount2("./715/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./715/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./715/binderfs") = 0 [pid 5028] umount2("./715/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./715/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./715/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./715/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./715/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./715/file0") = 0 [pid 5028] umount2("./715/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./715/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./715/cgroup") = 0 [pid 5028] umount2("./715/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./715/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./715/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./715") = 0 [pid 5028] mkdir("./716", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7172 attached , child_tidptr=0x5555563a5690) = 2130 [pid 7172] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7172] chdir("./716") = 0 [pid 7172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7172] setpgid(0, 0) = 0 [pid 7172] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7172] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7172] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7172] write(3, "1000", 4) = 4 [pid 7172] close(3) = 0 [pid 7172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7172] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7172] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7172] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7172] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7172] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7173 attached => {parent_tid=[2131]}, 88) = 2131 [pid 7173] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7172] rt_sigprocmask(SIG_SETMASK, [], [pid 7173] <... rseq resumed>) = 0 [pid 7172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7173] set_robust_list(0x7feeffcce9a0, 24 [pid 7172] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... set_robust_list resumed>) = 0 [pid 7172] <... futex resumed>) = 0 [pid 7173] rt_sigprocmask(SIG_SETMASK, [], [pid 7172] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7173] memfd_create("syzkaller", 0) = 3 [pid 7173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7173] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7173] munmap(0x7feef78ae000, 2097152) = 0 [pid 7173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7173] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7173] close(3) = 0 [pid 7173] mkdir("./file0", 0777) = 0 [pid 7173] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7173] chdir("./file0") = 0 [pid 7173] ioctl(4, LOOP_CLR_FD) = 0 [pid 7173] close(4) = 0 [pid 7173] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7173] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] <... futex resumed>) = 0 [pid 7172] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7173] <... futex resumed>) = 0 [pid 7172] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7173] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7173] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7172] <... futex resumed>) = 0 [pid 7173] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7172] <... futex resumed>) = 0 [pid 7173] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7172] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7173] <... openat resumed>) = 5 [pid 7173] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7172] <... futex resumed>) = 0 [pid 7172] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7173] <... futex resumed>) = 1 [pid 7172] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 230.396631][ T7173] loop0: detected capacity change from 0 to 4096 [ 230.416509][ T7173] ntfs: volume version 3.1. [pid 7173] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7172] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7172] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7172] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7174 attached => {parent_tid=[2132]}, 88) = 2132 [pid 7174] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7172] rt_sigprocmask(SIG_SETMASK, [], [pid 7174] <... rseq resumed>) = 0 [pid 7172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7174] set_robust_list(0x7feef7aad9a0, 24 [pid 7172] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7174] <... set_robust_list resumed>) = 0 [pid 7172] <... futex resumed>) = 0 [pid 7174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7172] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7174] ftruncate(4, 0) = 0 [pid 7174] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7174] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] <... futex resumed>) = 0 [pid 7173] <... write resumed>) = 1048064 [pid 7173] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7173] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7172] close(3) = 0 [pid 7172] close(4) = 0 [pid 7172] close(5) = 0 [pid 7172] close(6) = -1 EBADF (Bad file descriptor) [pid 7172] close(7) = -1 EBADF (Bad file descriptor) [pid 7172] close(8) = -1 EBADF (Bad file descriptor) [pid 7172] close(9) = -1 EBADF (Bad file descriptor) [pid 7172] close(10) = -1 EBADF (Bad file descriptor) [pid 7172] close(11) = -1 EBADF (Bad file descriptor) [pid 7172] close(12) = -1 EBADF (Bad file descriptor) [pid 7172] close(13) = -1 EBADF (Bad file descriptor) [pid 7172] close(14) = -1 EBADF (Bad file descriptor) [pid 7172] close(15) = -1 EBADF (Bad file descriptor) [pid 7172] close(16) = -1 EBADF (Bad file descriptor) [pid 7172] close(17) = -1 EBADF (Bad file descriptor) [pid 7172] close(18) = -1 EBADF (Bad file descriptor) [pid 7172] close(19) = -1 EBADF (Bad file descriptor) [pid 7172] close(20) = -1 EBADF (Bad file descriptor) [pid 7172] close(21) = -1 EBADF (Bad file descriptor) [pid 7172] close(22) = -1 EBADF (Bad file descriptor) [pid 7172] close(23) = -1 EBADF (Bad file descriptor) [pid 7172] close(24) = -1 EBADF (Bad file descriptor) [pid 7172] close(25) = -1 EBADF (Bad file descriptor) [pid 7172] close(26) = -1 EBADF (Bad file descriptor) [pid 7172] close(27) = -1 EBADF (Bad file descriptor) [pid 7172] close(28) = -1 EBADF (Bad file descriptor) [pid 7172] close(29) = -1 EBADF (Bad file descriptor) [pid 7172] exit_group(0) = ? [pid 7173] <... futex resumed>) = ? [pid 7174] <... futex resumed>) = ? [pid 7173] +++ exited with 0 +++ [pid 7174] +++ exited with 0 +++ [pid 7172] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2130, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./716", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./716", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./716/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./716/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./716/cgroup.cpu") = 0 [pid 5028] umount2("./716/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./716/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./716/binderfs") = 0 [pid 5028] umount2("./716/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./716/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./716/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./716/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./716/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./716/file0") = 0 [pid 5028] umount2("./716/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./716/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./716/cgroup") = 0 [pid 5028] umount2("./716/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./716/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./716/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./716") = 0 [pid 5028] mkdir("./717", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2133 ./strace-static-x86_64: Process 7175 attached [pid 7175] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7175] chdir("./717") = 0 [pid 7175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7175] setpgid(0, 0) = 0 [pid 7175] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7175] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7175] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7175] write(3, "1000", 4) = 4 [pid 7175] close(3) = 0 [pid 7175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7175] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7175] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7175] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7175] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7175] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7175] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7176 attached [pid 7176] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7175] <... clone3 resumed> => {parent_tid=[2134]}, 88) = 2134 [pid 7175] rt_sigprocmask(SIG_SETMASK, [], [pid 7176] <... rseq resumed>) = 0 [pid 7175] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7176] set_robust_list(0x7feeffcce9a0, 24 [pid 7175] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... set_robust_list resumed>) = 0 [pid 7175] <... futex resumed>) = 0 [pid 7175] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7176] memfd_create("syzkaller", 0) = 3 [pid 7176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7176] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7176] munmap(0x7feef78ae000, 2097152) = 0 [pid 7176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7176] close(3) = 0 [pid 7176] mkdir("./file0", 0777) = 0 [pid 7176] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7176] chdir("./file0") = 0 [pid 7176] ioctl(4, LOOP_CLR_FD) = 0 [pid 7176] close(4) = 0 [pid 7176] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7176] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7175] <... futex resumed>) = 0 [pid 7175] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... futex resumed>) = 0 [pid 7175] <... futex resumed>) = 1 [pid 7176] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7175] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7176] <... openat resumed>) = 4 [pid 7176] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7175] <... futex resumed>) = 0 [pid 7176] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7175] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7175] <... futex resumed>) = 0 [pid 7176] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7175] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7176] <... openat resumed>) = 5 [pid 7176] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7175] <... futex resumed>) = 0 [pid 7176] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7175] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7175] <... futex resumed>) = 0 [pid 7176] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 230.598390][ T7176] loop0: detected capacity change from 0 to 4096 [ 230.619972][ T7176] ntfs: volume version 3.1. [pid 7175] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7175] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7175] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7175] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7175] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7177 attached => {parent_tid=[2135]}, 88) = 2135 [pid 7177] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7175] rt_sigprocmask(SIG_SETMASK, [], [pid 7177] <... rseq resumed>) = 0 [pid 7175] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7177] set_robust_list(0x7feef7aad9a0, 24 [pid 7175] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7177] <... set_robust_list resumed>) = 0 [pid 7175] <... futex resumed>) = 0 [pid 7177] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7175] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7177] ftruncate(4, 0) = 0 [pid 7177] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7176] <... write resumed>) = 1048064 [pid 7177] <... futex resumed>) = 1 [pid 7177] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7175] <... futex resumed>) = 0 [pid 7176] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7176] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7175] close(3) = 0 [pid 7175] close(4) = 0 [pid 7175] close(5) = 0 [pid 7175] close(6) = -1 EBADF (Bad file descriptor) [pid 7175] close(7) = -1 EBADF (Bad file descriptor) [pid 7175] close(8) = -1 EBADF (Bad file descriptor) [pid 7175] close(9) = -1 EBADF (Bad file descriptor) [pid 7175] close(10) = -1 EBADF (Bad file descriptor) [pid 7175] close(11) = -1 EBADF (Bad file descriptor) [pid 7175] close(12) = -1 EBADF (Bad file descriptor) [pid 7175] close(13) = -1 EBADF (Bad file descriptor) [pid 7175] close(14) = -1 EBADF (Bad file descriptor) [pid 7175] close(15) = -1 EBADF (Bad file descriptor) [pid 7175] close(16) = -1 EBADF (Bad file descriptor) [pid 7175] close(17) = -1 EBADF (Bad file descriptor) [pid 7175] close(18) = -1 EBADF (Bad file descriptor) [pid 7175] close(19) = -1 EBADF (Bad file descriptor) [pid 7175] close(20) = -1 EBADF (Bad file descriptor) [pid 7175] close(21) = -1 EBADF (Bad file descriptor) [pid 7175] close(22) = -1 EBADF (Bad file descriptor) [pid 7175] close(23) = -1 EBADF (Bad file descriptor) [pid 7175] close(24) = -1 EBADF (Bad file descriptor) [pid 7175] close(25) = -1 EBADF (Bad file descriptor) [pid 7175] close(26) = -1 EBADF (Bad file descriptor) [pid 7175] close(27) = -1 EBADF (Bad file descriptor) [pid 7175] close(28) = -1 EBADF (Bad file descriptor) [pid 7175] close(29) = -1 EBADF (Bad file descriptor) [pid 7175] exit_group(0) = ? [pid 7176] <... futex resumed>) = ? [pid 7177] <... futex resumed>) = ? [pid 7176] +++ exited with 0 +++ [pid 7177] +++ exited with 0 +++ [pid 7175] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2133, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./717", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./717", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./717/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./717/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./717/cgroup.cpu") = 0 [pid 5028] umount2("./717/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./717/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./717/binderfs") = 0 [pid 5028] umount2("./717/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./717/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./717/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./717/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./717/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./717/file0") = 0 [pid 5028] umount2("./717/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./717/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./717/cgroup") = 0 [pid 5028] umount2("./717/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./717/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./717/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./717") = 0 [pid 5028] mkdir("./718", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2136 ./strace-static-x86_64: Process 7178 attached [pid 7178] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7178] chdir("./718") = 0 [pid 7178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7178] setpgid(0, 0) = 0 [pid 7178] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7178] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7178] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7178] write(3, "1000", 4) = 4 [pid 7178] close(3) = 0 [pid 7178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7178] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7178] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7178] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7178] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7179 attached => {parent_tid=[2137]}, 88) = 2137 [pid 7178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7178] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7179] set_robust_list(0x7feeffcce9a0, 24 [pid 7178] <... futex resumed>) = 0 [pid 7179] <... set_robust_list resumed>) = 0 [pid 7179] rt_sigprocmask(SIG_SETMASK, [], [pid 7178] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7179] memfd_create("syzkaller", 0) = 3 [pid 7179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7179] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7179] munmap(0x7feef78ae000, 2097152) = 0 [pid 7179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7179] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7179] close(3) = 0 [pid 7179] mkdir("./file0", 0777) = 0 [pid 7179] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7179] chdir("./file0") = 0 [pid 7179] ioctl(4, LOOP_CLR_FD) = 0 [pid 7179] close(4) = 0 [pid 7179] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7178] <... futex resumed>) = 0 [pid 7179] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7178] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] <... futex resumed>) = 0 [pid 7178] <... futex resumed>) = 1 [pid 7179] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7178] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] <... openat resumed>) = 4 [pid 7179] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7179] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7178] <... futex resumed>) = 0 [pid 7178] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7178] <... futex resumed>) = 0 [pid 7179] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7178] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7179] <... openat resumed>) = 5 [pid 7179] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7179] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7178] <... futex resumed>) = 0 [pid 7178] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] <... futex resumed>) = 0 [pid 7178] <... futex resumed>) = 1 [pid 7179] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 230.840993][ T7179] loop0: detected capacity change from 0 to 4096 [ 230.861692][ T7179] ntfs: volume version 3.1. [pid 7178] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7178] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7178] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7180 attached => {parent_tid=[2138]}, 88) = 2138 [pid 7180] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7180] <... rseq resumed>) = 0 [pid 7180] set_robust_list(0x7feef7aad9a0, 24 [pid 7178] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... set_robust_list resumed>) = 0 [pid 7180] rt_sigprocmask(SIG_SETMASK, [], [pid 7178] <... futex resumed>) = 0 [pid 7180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7180] ftruncate(4, 0 [pid 7178] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7180] <... ftruncate resumed>) = 0 [pid 7179] <... write resumed>) = 1048064 [pid 7180] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7179] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7180] <... futex resumed>) = 1 [pid 7180] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7179] <... futex resumed>) = 0 [pid 7179] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7178] <... futex resumed>) = 0 [pid 7178] close(3) = 0 [pid 7178] close(4) = 0 [pid 7178] close(5) = 0 [pid 7178] close(6) = -1 EBADF (Bad file descriptor) [pid 7178] close(7) = -1 EBADF (Bad file descriptor) [pid 7178] close(8) = -1 EBADF (Bad file descriptor) [pid 7178] close(9) = -1 EBADF (Bad file descriptor) [pid 7178] close(10) = -1 EBADF (Bad file descriptor) [pid 7178] close(11) = -1 EBADF (Bad file descriptor) [pid 7178] close(12) = -1 EBADF (Bad file descriptor) [pid 7178] close(13) = -1 EBADF (Bad file descriptor) [pid 7178] close(14) = -1 EBADF (Bad file descriptor) [pid 7178] close(15) = -1 EBADF (Bad file descriptor) [pid 7178] close(16) = -1 EBADF (Bad file descriptor) [pid 7178] close(17) = -1 EBADF (Bad file descriptor) [pid 7178] close(18) = -1 EBADF (Bad file descriptor) [pid 7178] close(19) = -1 EBADF (Bad file descriptor) [pid 7178] close(20) = -1 EBADF (Bad file descriptor) [pid 7178] close(21) = -1 EBADF (Bad file descriptor) [pid 7178] close(22) = -1 EBADF (Bad file descriptor) [pid 7178] close(23) = -1 EBADF (Bad file descriptor) [pid 7178] close(24) = -1 EBADF (Bad file descriptor) [pid 7178] close(25) = -1 EBADF (Bad file descriptor) [pid 7178] close(26) = -1 EBADF (Bad file descriptor) [pid 7178] close(27) = -1 EBADF (Bad file descriptor) [pid 7178] close(28) = -1 EBADF (Bad file descriptor) [pid 7178] close(29) = -1 EBADF (Bad file descriptor) [pid 7178] exit_group(0) = ? [pid 7179] <... futex resumed>) = ? [pid 7180] <... futex resumed>) = ? [pid 7179] +++ exited with 0 +++ [pid 7180] +++ exited with 0 +++ [pid 7178] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2136, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./718", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./718", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./718/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./718/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./718/cgroup.cpu") = 0 [pid 5028] umount2("./718/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./718/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./718/binderfs") = 0 [pid 5028] umount2("./718/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./718/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./718/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./718/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./718/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./718/file0") = 0 [pid 5028] umount2("./718/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./718/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./718/cgroup") = 0 [pid 5028] umount2("./718/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./718/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./718/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./718") = 0 [pid 5028] mkdir("./719", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7181 attached , child_tidptr=0x5555563a5690) = 2139 [pid 7181] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7181] chdir("./719") = 0 [pid 7181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7181] setpgid(0, 0) = 0 [pid 7181] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7181] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7181] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7181] write(3, "1000", 4) = 4 [pid 7181] close(3) = 0 [pid 7181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7181] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7181] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7181] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7181] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7181] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7182 attached => {parent_tid=[2140]}, 88) = 2140 [pid 7182] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7181] rt_sigprocmask(SIG_SETMASK, [], [pid 7182] <... rseq resumed>) = 0 [pid 7181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7182] set_robust_list(0x7feeffcce9a0, 24 [pid 7181] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7182] <... set_robust_list resumed>) = 0 [pid 7181] <... futex resumed>) = 0 [pid 7182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7181] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7182] memfd_create("syzkaller", 0) = 3 [pid 7182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7182] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7182] munmap(0x7feef78ae000, 2097152) = 0 [pid 7182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7182] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7182] close(3) = 0 [pid 7182] mkdir("./file0", 0777) = 0 [pid 7182] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7182] chdir("./file0") = 0 [pid 7182] ioctl(4, LOOP_CLR_FD) = 0 [pid 7182] close(4) = 0 [pid 7182] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7182] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7181] <... futex resumed>) = 0 [pid 7181] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7182] <... futex resumed>) = 0 [pid 7181] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7182] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7182] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7181] <... futex resumed>) = 0 [pid 7182] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7181] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7181] <... futex resumed>) = 0 [pid 7182] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7181] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7182] <... openat resumed>) = 5 [pid 7182] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7182] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7181] <... futex resumed>) = 0 [pid 7181] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7182] <... futex resumed>) = 0 [pid 7181] <... futex resumed>) = 1 [pid 7182] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 231.069410][ T7182] loop0: detected capacity change from 0 to 4096 [ 231.091427][ T7182] ntfs: volume version 3.1. [pid 7181] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7181] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7181] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7181] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2141]}, 88) = 2141 [pid 7181] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7181] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7181] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7183 attached [pid 7183] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7183] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7183] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7183] ftruncate(4, 0) = 0 [pid 7183] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7182] <... write resumed>) = 1048064 [pid 7183] <... futex resumed>) = 1 [pid 7182] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7181] <... futex resumed>) = 0 [pid 7183] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7182] <... futex resumed>) = 0 [pid 7181] close(3 [pid 7182] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7181] <... close resumed>) = 0 [pid 7181] close(4) = 0 [pid 7181] close(5) = 0 [pid 7181] close(6) = -1 EBADF (Bad file descriptor) [pid 7181] close(7) = -1 EBADF (Bad file descriptor) [pid 7181] close(8) = -1 EBADF (Bad file descriptor) [pid 7181] close(9) = -1 EBADF (Bad file descriptor) [pid 7181] close(10) = -1 EBADF (Bad file descriptor) [pid 7181] close(11) = -1 EBADF (Bad file descriptor) [pid 7181] close(12) = -1 EBADF (Bad file descriptor) [pid 7181] close(13) = -1 EBADF (Bad file descriptor) [pid 7181] close(14) = -1 EBADF (Bad file descriptor) [pid 7181] close(15) = -1 EBADF (Bad file descriptor) [pid 7181] close(16) = -1 EBADF (Bad file descriptor) [pid 7181] close(17) = -1 EBADF (Bad file descriptor) [pid 7181] close(18) = -1 EBADF (Bad file descriptor) [pid 7181] close(19) = -1 EBADF (Bad file descriptor) [pid 7181] close(20) = -1 EBADF (Bad file descriptor) [pid 7181] close(21) = -1 EBADF (Bad file descriptor) [pid 7181] close(22) = -1 EBADF (Bad file descriptor) [pid 7181] close(23) = -1 EBADF (Bad file descriptor) [pid 7181] close(24) = -1 EBADF (Bad file descriptor) [pid 7181] close(25) = -1 EBADF (Bad file descriptor) [pid 7181] close(26) = -1 EBADF (Bad file descriptor) [pid 7181] close(27) = -1 EBADF (Bad file descriptor) [pid 7181] close(28) = -1 EBADF (Bad file descriptor) [pid 7181] close(29) = -1 EBADF (Bad file descriptor) [pid 7181] exit_group(0) = ? [pid 7183] <... futex resumed>) = ? [pid 7182] <... futex resumed>) = ? [pid 7183] +++ exited with 0 +++ [pid 7182] +++ exited with 0 +++ [pid 7181] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2139, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./719", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./719", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./719/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./719/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./719/cgroup.cpu") = 0 [pid 5028] umount2("./719/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./719/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./719/binderfs") = 0 [pid 5028] umount2("./719/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./719/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./719/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./719/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./719/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./719/file0") = 0 [pid 5028] umount2("./719/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./719/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./719/cgroup") = 0 [pid 5028] umount2("./719/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./719/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./719/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./719") = 0 [pid 5028] mkdir("./720", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7184 attached [pid 7184] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7184] chdir("./720") = 0 [pid 7184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7184] setpgid(0, 0) = 0 [pid 7184] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2142 [pid 7184] <... symlink resumed>) = 0 [pid 7184] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7184] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7184] write(3, "1000", 4) = 4 [pid 7184] close(3) = 0 [pid 7184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7184] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7184] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7184] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7184] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7184] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7185 attached [pid 7185] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7184] <... clone3 resumed> => {parent_tid=[2143]}, 88) = 2143 [pid 7184] rt_sigprocmask(SIG_SETMASK, [], [pid 7185] <... rseq resumed>) = 0 [pid 7184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7185] set_robust_list(0x7feeffcce9a0, 24 [pid 7184] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7185] <... set_robust_list resumed>) = 0 [pid 7184] <... futex resumed>) = 0 [pid 7185] rt_sigprocmask(SIG_SETMASK, [], [pid 7184] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7185] memfd_create("syzkaller", 0) = 3 [pid 7185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7185] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7185] munmap(0x7feef78ae000, 2097152) = 0 [pid 7185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7185] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7185] close(3) = 0 [pid 7185] mkdir("./file0", 0777) = 0 [pid 7185] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7185] chdir("./file0") = 0 [pid 7185] ioctl(4, LOOP_CLR_FD) = 0 [pid 7185] close(4) = 0 [pid 7185] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7184] <... futex resumed>) = 0 [pid 7184] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7184] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7185] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7185] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7185] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7184] <... futex resumed>) = 0 [pid 7184] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7185] <... futex resumed>) = 0 [pid 7185] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7184] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7185] <... openat resumed>) = 5 [pid 7185] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7184] <... futex resumed>) = 0 [pid 7184] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7185] <... futex resumed>) = 1 [pid 7184] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 231.294304][ T7185] loop0: detected capacity change from 0 to 4096 [ 231.315362][ T7185] ntfs: volume version 3.1. [pid 7185] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7184] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7184] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7184] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7184] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7186 attached [pid 7186] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7184] <... clone3 resumed> => {parent_tid=[2144]}, 88) = 2144 [pid 7186] <... rseq resumed>) = 0 [pid 7184] rt_sigprocmask(SIG_SETMASK, [], [pid 7186] set_robust_list(0x7feef7aad9a0, 24 [pid 7184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7186] <... set_robust_list resumed>) = 0 [pid 7184] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] rt_sigprocmask(SIG_SETMASK, [], [pid 7184] <... futex resumed>) = 0 [pid 7186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7184] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7186] ftruncate(4, 0) = 0 [pid 7186] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7185] <... write resumed>) = 1048064 [pid 7186] <... futex resumed>) = 1 [pid 7185] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7186] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7185] <... futex resumed>) = 0 [pid 7185] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7184] <... futex resumed>) = 0 [pid 7184] close(3) = 0 [pid 7184] close(4) = 0 [pid 7184] close(5) = 0 [pid 7184] close(6) = -1 EBADF (Bad file descriptor) [pid 7184] close(7) = -1 EBADF (Bad file descriptor) [pid 7184] close(8) = -1 EBADF (Bad file descriptor) [pid 7184] close(9) = -1 EBADF (Bad file descriptor) [pid 7184] close(10) = -1 EBADF (Bad file descriptor) [pid 7184] close(11) = -1 EBADF (Bad file descriptor) [pid 7184] close(12) = -1 EBADF (Bad file descriptor) [pid 7184] close(13) = -1 EBADF (Bad file descriptor) [pid 7184] close(14) = -1 EBADF (Bad file descriptor) [pid 7184] close(15) = -1 EBADF (Bad file descriptor) [pid 7184] close(16) = -1 EBADF (Bad file descriptor) [pid 7184] close(17) = -1 EBADF (Bad file descriptor) [pid 7184] close(18) = -1 EBADF (Bad file descriptor) [pid 7184] close(19) = -1 EBADF (Bad file descriptor) [pid 7184] close(20) = -1 EBADF (Bad file descriptor) [pid 7184] close(21) = -1 EBADF (Bad file descriptor) [pid 7184] close(22) = -1 EBADF (Bad file descriptor) [pid 7184] close(23) = -1 EBADF (Bad file descriptor) [pid 7184] close(24) = -1 EBADF (Bad file descriptor) [pid 7184] close(25) = -1 EBADF (Bad file descriptor) [pid 7184] close(26) = -1 EBADF (Bad file descriptor) [pid 7184] close(27) = -1 EBADF (Bad file descriptor) [pid 7184] close(28) = -1 EBADF (Bad file descriptor) [pid 7184] close(29) = -1 EBADF (Bad file descriptor) [pid 7184] exit_group(0) = ? [pid 7185] <... futex resumed>) = ? [pid 7186] <... futex resumed>) = ? [pid 7185] +++ exited with 0 +++ [pid 7186] +++ exited with 0 +++ [pid 7184] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2142, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./720", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./720", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./720/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./720/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./720/cgroup.cpu") = 0 [pid 5028] umount2("./720/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./720/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./720/binderfs") = 0 [pid 5028] umount2("./720/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./720/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./720/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./720/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./720/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./720/file0") = 0 [pid 5028] umount2("./720/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./720/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./720/cgroup") = 0 [pid 5028] umount2("./720/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./720/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./720/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./720") = 0 [pid 5028] mkdir("./721", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7187 attached [pid 7187] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2145 [pid 7187] <... set_robust_list resumed>) = 0 [pid 7187] chdir("./721") = 0 [pid 7187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7187] setpgid(0, 0) = 0 [pid 7187] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7187] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7187] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7187] write(3, "1000", 4) = 4 [pid 7187] close(3) = 0 [pid 7187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7187] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7187] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7187] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7187] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7187] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2146]}, 88) = 2146 [pid 7187] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7188 attached NULL, 8) = 0 [pid 7187] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7188] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7188] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7188] memfd_create("syzkaller", 0) = 3 [pid 7188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7188] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7188] munmap(0x7feef78ae000, 2097152) = 0 [pid 7188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7188] close(3) = 0 [pid 7188] mkdir("./file0", 0777) = 0 [ 231.521099][ T7188] loop0: detected capacity change from 0 to 4096 [ 231.530090][ T7188] __ntfs_warning: 12 callbacks suppressed [ 231.530105][ T7188] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7188] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7188] chdir("./file0") = 0 [pid 7188] ioctl(4, LOOP_CLR_FD) = 0 [pid 7188] close(4) = 0 [pid 7188] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7187] <... futex resumed>) = 0 [pid 7188] <... futex resumed>) = 1 [pid 7187] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7188] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7187] <... futex resumed>) = 0 [pid 7187] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7188] <... openat resumed>) = 4 [pid 7188] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7187] <... futex resumed>) = 0 [pid 7187] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7188] <... futex resumed>) = 1 [pid 7188] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7188] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7187] <... futex resumed>) = 0 [pid 7187] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7188] <... futex resumed>) = 1 [ 231.567134][ T7188] ntfs: volume version 3.1. [pid 7188] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7187] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7187] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7187] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7187] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7187] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7187] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7189 attached [pid 7189] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7189] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7189] rt_sigprocmask(SIG_SETMASK, [], [pid 7187] <... clone3 resumed> => {parent_tid=[2147]}, 88) = 2147 [pid 7189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7187] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7189] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7187] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7187] <... futex resumed>) = 0 [pid 7187] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7189] ftruncate(4, 0) = 0 [pid 7189] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7188] <... write resumed>) = 1048064 [pid 7187] <... futex resumed>) = 0 [pid 7189] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7188] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7188] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7187] close(3) = 0 [pid 7187] close(4) = 0 [pid 7187] close(5) = 0 [pid 7187] close(6) = -1 EBADF (Bad file descriptor) [pid 7187] close(7) = -1 EBADF (Bad file descriptor) [pid 7187] close(8) = -1 EBADF (Bad file descriptor) [pid 7187] close(9) = -1 EBADF (Bad file descriptor) [pid 7187] close(10) = -1 EBADF (Bad file descriptor) [pid 7187] close(11) = -1 EBADF (Bad file descriptor) [pid 7187] close(12) = -1 EBADF (Bad file descriptor) [pid 7187] close(13) = -1 EBADF (Bad file descriptor) [pid 7187] close(14) = -1 EBADF (Bad file descriptor) [pid 7187] close(15) = -1 EBADF (Bad file descriptor) [pid 7187] close(16) = -1 EBADF (Bad file descriptor) [pid 7187] close(17) = -1 EBADF (Bad file descriptor) [pid 7187] close(18) = -1 EBADF (Bad file descriptor) [pid 7187] close(19) = -1 EBADF (Bad file descriptor) [pid 7187] close(20) = -1 EBADF (Bad file descriptor) [pid 7187] close(21) = -1 EBADF (Bad file descriptor) [pid 7187] close(22) = -1 EBADF (Bad file descriptor) [pid 7187] close(23) = -1 EBADF (Bad file descriptor) [pid 7187] close(24) = -1 EBADF (Bad file descriptor) [pid 7187] close(25) = -1 EBADF (Bad file descriptor) [pid 7187] close(26) = -1 EBADF (Bad file descriptor) [pid 7187] close(27) = -1 EBADF (Bad file descriptor) [pid 7187] close(28) = -1 EBADF (Bad file descriptor) [pid 7187] close(29) = -1 EBADF (Bad file descriptor) [pid 7187] exit_group(0) = ? [pid 7188] <... futex resumed>) = ? [pid 7189] <... futex resumed>) = ? [pid 7189] +++ exited with 0 +++ [pid 7188] +++ exited with 0 +++ [pid 7187] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2145, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./721", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./721", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./721/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./721/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./721/cgroup.cpu") = 0 [pid 5028] umount2("./721/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./721/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./721/binderfs") = 0 [pid 5028] umount2("./721/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./721/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./721/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./721/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./721/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./721/file0") = 0 [pid 5028] umount2("./721/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./721/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./721/cgroup") = 0 [pid 5028] umount2("./721/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./721/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./721/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./721") = 0 [pid 5028] mkdir("./722", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7190 attached , child_tidptr=0x5555563a5690) = 2148 [pid 7190] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7190] chdir("./722") = 0 [pid 7190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7190] setpgid(0, 0) = 0 [pid 7190] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7190] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7190] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7190] write(3, "1000", 4) = 4 [pid 7190] close(3) = 0 [pid 7190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7190] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7190] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7190] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7190] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7190] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7191 attached => {parent_tid=[2149]}, 88) = 2149 [pid 7190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7190] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7190] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7191] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7191] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7191] memfd_create("syzkaller", 0) = 3 [pid 7191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7191] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7191] munmap(0x7feef78ae000, 2097152) = 0 [pid 7191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7191] close(3) = 0 [pid 7191] mkdir("./file0", 0777) = 0 [pid 7191] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7191] chdir("./file0") = 0 [pid 7191] ioctl(4, LOOP_CLR_FD) = 0 [pid 7191] close(4) = 0 [pid 7191] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7191] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7190] <... futex resumed>) = 0 [pid 7190] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7191] <... futex resumed>) = 0 [pid 7191] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7190] <... futex resumed>) = 1 [pid 7190] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7191] <... openat resumed>) = 4 [pid 7191] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7190] <... futex resumed>) = 0 [pid 7190] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7191] <... futex resumed>) = 1 [pid 7190] <... futex resumed>) = 0 [pid 7190] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7191] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7191] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7190] <... futex resumed>) = 0 [pid 7191] <... futex resumed>) = 1 [pid 7190] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7191] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7190] <... futex resumed>) = 0 [ 231.749123][ T7191] loop0: detected capacity change from 0 to 4096 [ 231.758256][ T7191] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 231.790846][ T7191] ntfs: volume version 3.1. [pid 7190] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7190] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7190] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7190] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7192 attached [pid 7192] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7190] <... clone3 resumed> => {parent_tid=[2150]}, 88) = 2150 [pid 7192] <... rseq resumed>) = 0 [pid 7190] rt_sigprocmask(SIG_SETMASK, [], [pid 7192] set_robust_list(0x7feef7aad9a0, 24 [pid 7190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7192] <... set_robust_list resumed>) = 0 [pid 7190] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7190] <... futex resumed>) = 0 [pid 7192] ftruncate(4, 0 [pid 7190] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7192] <... ftruncate resumed>) = 0 [pid 7191] <... write resumed>) = 1048064 [pid 7191] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7191] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7192] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7192] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7190] <... futex resumed>) = 0 [pid 7190] close(3) = 0 [pid 7190] close(4) = 0 [pid 7190] close(5) = 0 [pid 7190] close(6) = -1 EBADF (Bad file descriptor) [pid 7190] close(7) = -1 EBADF (Bad file descriptor) [pid 7190] close(8) = -1 EBADF (Bad file descriptor) [pid 7190] close(9) = -1 EBADF (Bad file descriptor) [pid 7190] close(10) = -1 EBADF (Bad file descriptor) [pid 7190] close(11) = -1 EBADF (Bad file descriptor) [pid 7190] close(12) = -1 EBADF (Bad file descriptor) [pid 7190] close(13) = -1 EBADF (Bad file descriptor) [pid 7190] close(14) = -1 EBADF (Bad file descriptor) [pid 7190] close(15) = -1 EBADF (Bad file descriptor) [pid 7190] close(16) = -1 EBADF (Bad file descriptor) [pid 7190] close(17) = -1 EBADF (Bad file descriptor) [pid 7190] close(18) = -1 EBADF (Bad file descriptor) [pid 7190] close(19) = -1 EBADF (Bad file descriptor) [pid 7190] close(20) = -1 EBADF (Bad file descriptor) [pid 7190] close(21) = -1 EBADF (Bad file descriptor) [pid 7190] close(22) = -1 EBADF (Bad file descriptor) [pid 7190] close(23) = -1 EBADF (Bad file descriptor) [pid 7190] close(24) = -1 EBADF (Bad file descriptor) [pid 7190] close(25) = -1 EBADF (Bad file descriptor) [pid 7190] close(26) = -1 EBADF (Bad file descriptor) [pid 7190] close(27) = -1 EBADF (Bad file descriptor) [pid 7190] close(28) = -1 EBADF (Bad file descriptor) [pid 7190] close(29) = -1 EBADF (Bad file descriptor) [pid 7190] exit_group(0 [pid 7191] <... futex resumed>) = ? [pid 7192] <... futex resumed>) = ? [pid 7191] +++ exited with 0 +++ [pid 7190] <... exit_group resumed>) = ? [pid 7192] +++ exited with 0 +++ [pid 7190] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2148, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./722", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./722", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./722/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./722/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./722/cgroup.cpu") = 0 [pid 5028] umount2("./722/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./722/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./722/binderfs") = 0 [pid 5028] umount2("./722/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./722/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./722/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./722/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./722/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./722/file0") = 0 [pid 5028] umount2("./722/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./722/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./722/cgroup") = 0 [pid 5028] umount2("./722/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./722/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./722/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./722") = 0 [pid 5028] mkdir("./723", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2151 ./strace-static-x86_64: Process 7193 attached [pid 7193] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7193] chdir("./723") = 0 [pid 7193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7193] setpgid(0, 0) = 0 [pid 7193] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7193] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7193] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7193] write(3, "1000", 4) = 4 [pid 7193] close(3) = 0 [pid 7193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7193] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7193] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7193] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7193] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7193] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7194 attached [pid 7194] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7194] set_robust_list(0x7feeffcce9a0, 24 [pid 7193] <... clone3 resumed> => {parent_tid=[2152]}, 88) = 2152 [pid 7194] <... set_robust_list resumed>) = 0 [pid 7193] rt_sigprocmask(SIG_SETMASK, [], [pid 7194] rt_sigprocmask(SIG_SETMASK, [], [pid 7193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7194] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7193] <... futex resumed>) = 0 [pid 7193] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7194] memfd_create("syzkaller", 0) = 3 [pid 7194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7194] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7194] munmap(0x7feef78ae000, 2097152) = 0 [pid 7194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7194] close(3) = 0 [pid 7194] mkdir("./file0", 0777) = 0 [pid 7194] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7194] chdir("./file0") = 0 [pid 7194] ioctl(4, LOOP_CLR_FD) = 0 [pid 7194] close(4) = 0 [pid 7194] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7193] <... futex resumed>) = 0 [pid 7193] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7194] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7193] <... futex resumed>) = 0 [pid 7193] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7194] <... openat resumed>) = 4 [pid 7194] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7193] <... futex resumed>) = 0 [pid 7194] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7193] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7194] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7194] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7193] <... futex resumed>) = 0 [pid 7194] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7193] <... futex resumed>) = 0 [pid 7194] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 231.979837][ T7194] loop0: detected capacity change from 0 to 4096 [ 231.988954][ T7194] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.020068][ T7194] ntfs: volume version 3.1. [pid 7193] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7193] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7193] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7193] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7195 attached [pid 7195] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7195] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7195] rt_sigprocmask(SIG_SETMASK, [], [pid 7193] <... clone3 resumed> => {parent_tid=[2153]}, 88) = 2153 [pid 7195] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7195] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7195] <... futex resumed>) = 0 [pid 7193] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7195] ftruncate(4, 0) = 0 [pid 7194] <... write resumed>) = 1048064 [pid 7195] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7194] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7193] <... futex resumed>) = 0 [pid 7195] <... futex resumed>) = 1 [pid 7194] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7195] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7193] close(3) = 0 [pid 7193] close(4) = 0 [pid 7193] close(5) = 0 [pid 7193] close(6) = -1 EBADF (Bad file descriptor) [pid 7193] close(7) = -1 EBADF (Bad file descriptor) [pid 7193] close(8) = -1 EBADF (Bad file descriptor) [pid 7193] close(9) = -1 EBADF (Bad file descriptor) [pid 7193] close(10) = -1 EBADF (Bad file descriptor) [pid 7193] close(11) = -1 EBADF (Bad file descriptor) [pid 7193] close(12) = -1 EBADF (Bad file descriptor) [pid 7193] close(13) = -1 EBADF (Bad file descriptor) [pid 7193] close(14) = -1 EBADF (Bad file descriptor) [pid 7193] close(15) = -1 EBADF (Bad file descriptor) [pid 7193] close(16) = -1 EBADF (Bad file descriptor) [pid 7193] close(17) = -1 EBADF (Bad file descriptor) [pid 7193] close(18) = -1 EBADF (Bad file descriptor) [pid 7193] close(19) = -1 EBADF (Bad file descriptor) [pid 7193] close(20) = -1 EBADF (Bad file descriptor) [pid 7193] close(21) = -1 EBADF (Bad file descriptor) [pid 7193] close(22) = -1 EBADF (Bad file descriptor) [pid 7193] close(23) = -1 EBADF (Bad file descriptor) [pid 7193] close(24) = -1 EBADF (Bad file descriptor) [pid 7193] close(25) = -1 EBADF (Bad file descriptor) [pid 7193] close(26) = -1 EBADF (Bad file descriptor) [pid 7193] close(27) = -1 EBADF (Bad file descriptor) [pid 7193] close(28) = -1 EBADF (Bad file descriptor) [pid 7193] close(29) = -1 EBADF (Bad file descriptor) [pid 7193] exit_group(0 [pid 7194] <... futex resumed>) = ? [pid 7195] <... futex resumed>) = ? [pid 7194] +++ exited with 0 +++ [pid 7195] +++ exited with 0 +++ [pid 7193] <... exit_group resumed>) = ? [pid 7193] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2151, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./723", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./723", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./723/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./723/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./723/cgroup.cpu") = 0 [pid 5028] umount2("./723/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./723/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./723/binderfs") = 0 [pid 5028] umount2("./723/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./723/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./723/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./723/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./723/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./723/file0") = 0 [pid 5028] umount2("./723/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./723/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./723/cgroup") = 0 [pid 5028] umount2("./723/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./723/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./723/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./723") = 0 [pid 5028] mkdir("./724", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7196 attached , child_tidptr=0x5555563a5690) = 2154 [pid 7196] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7196] chdir("./724") = 0 [pid 7196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7196] setpgid(0, 0) = 0 [pid 7196] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7196] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7196] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7196] write(3, "1000", 4) = 4 [pid 7196] close(3) = 0 [pid 7196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7196] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7196] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7196] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7196] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7196] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7197 attached [pid 7197] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7196] <... clone3 resumed> => {parent_tid=[2155]}, 88) = 2155 [pid 7197] <... rseq resumed>) = 0 [pid 7196] rt_sigprocmask(SIG_SETMASK, [], [pid 7197] set_robust_list(0x7feeffcce9a0, 24 [pid 7196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7197] <... set_robust_list resumed>) = 0 [pid 7196] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7196] <... futex resumed>) = 0 [pid 7196] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7197] memfd_create("syzkaller", 0) = 3 [pid 7197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7197] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7197] munmap(0x7feef78ae000, 2097152) = 0 [pid 7197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7197] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7197] close(3) = 0 [pid 7197] mkdir("./file0", 0777) = 0 [pid 7197] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7197] chdir("./file0") = 0 [pid 7197] ioctl(4, LOOP_CLR_FD) = 0 [pid 7197] close(4) = 0 [pid 7197] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7197] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7196] <... futex resumed>) = 0 [pid 7196] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7197] <... futex resumed>) = 0 [pid 7196] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7197] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7197] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7196] <... futex resumed>) = 0 [pid 7197] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7196] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7197] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7196] <... futex resumed>) = 0 [pid 7196] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7197] <... openat resumed>) = 5 [pid 7197] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7196] <... futex resumed>) = 0 [pid 7196] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7197] <... futex resumed>) = 1 [pid 7196] <... futex resumed>) = 0 [pid 7196] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 232.225135][ T7197] loop0: detected capacity change from 0 to 4096 [ 232.234877][ T7197] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.266607][ T7197] ntfs: volume version 3.1. [pid 7197] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7196] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7196] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7196] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7196] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7198 attached [pid 7198] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7196] <... clone3 resumed> => {parent_tid=[2156]}, 88) = 2156 [pid 7198] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7196] rt_sigprocmask(SIG_SETMASK, [], [pid 7198] rt_sigprocmask(SIG_SETMASK, [], [pid 7196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7196] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7196] <... futex resumed>) = 0 [pid 7198] ftruncate(4, 0 [pid 7196] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7198] <... ftruncate resumed>) = 0 [pid 7198] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7197] <... write resumed>) = 1048064 [pid 7198] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7196] <... futex resumed>) = 0 [pid 7197] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7197] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7196] close(3) = 0 [pid 7196] close(4) = 0 [pid 7196] close(5) = 0 [pid 7196] close(6) = -1 EBADF (Bad file descriptor) [pid 7196] close(7) = -1 EBADF (Bad file descriptor) [pid 7196] close(8) = -1 EBADF (Bad file descriptor) [pid 7196] close(9) = -1 EBADF (Bad file descriptor) [pid 7196] close(10) = -1 EBADF (Bad file descriptor) [pid 7196] close(11) = -1 EBADF (Bad file descriptor) [pid 7196] close(12) = -1 EBADF (Bad file descriptor) [pid 7196] close(13) = -1 EBADF (Bad file descriptor) [pid 7196] close(14) = -1 EBADF (Bad file descriptor) [pid 7196] close(15) = -1 EBADF (Bad file descriptor) [pid 7196] close(16) = -1 EBADF (Bad file descriptor) [pid 7196] close(17) = -1 EBADF (Bad file descriptor) [pid 7196] close(18) = -1 EBADF (Bad file descriptor) [pid 7196] close(19) = -1 EBADF (Bad file descriptor) [pid 7196] close(20) = -1 EBADF (Bad file descriptor) [pid 7196] close(21) = -1 EBADF (Bad file descriptor) [pid 7196] close(22) = -1 EBADF (Bad file descriptor) [pid 7196] close(23) = -1 EBADF (Bad file descriptor) [pid 7196] close(24) = -1 EBADF (Bad file descriptor) [pid 7196] close(25) = -1 EBADF (Bad file descriptor) [pid 7196] close(26) = -1 EBADF (Bad file descriptor) [pid 7196] close(27) = -1 EBADF (Bad file descriptor) [pid 7196] close(28) = -1 EBADF (Bad file descriptor) [pid 7196] close(29) = -1 EBADF (Bad file descriptor) [pid 7196] exit_group(0) = ? [pid 7198] <... futex resumed>) = ? [pid 7197] <... futex resumed>) = ? [pid 7198] +++ exited with 0 +++ [pid 7197] +++ exited with 0 +++ [pid 7196] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2154, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./724", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./724", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./724/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./724/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./724/cgroup.cpu") = 0 [pid 5028] umount2("./724/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./724/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./724/binderfs") = 0 [pid 5028] umount2("./724/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./724/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./724/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./724/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./724/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./724/file0") = 0 [pid 5028] umount2("./724/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./724/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./724/cgroup") = 0 [pid 5028] umount2("./724/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./724/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./724/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./724") = 0 [pid 5028] mkdir("./725", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7199 attached , child_tidptr=0x5555563a5690) = 2157 [pid 7199] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7199] chdir("./725") = 0 [pid 7199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7199] setpgid(0, 0) = 0 [pid 7199] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7199] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7199] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7199] write(3, "1000", 4) = 4 [pid 7199] close(3) = 0 [pid 7199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7199] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7199] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7199] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7199] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7199] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7200 attached [pid 7200] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7199] <... clone3 resumed> => {parent_tid=[2158]}, 88) = 2158 [pid 7200] set_robust_list(0x7feeffcce9a0, 24 [pid 7199] rt_sigprocmask(SIG_SETMASK, [], [pid 7200] <... set_robust_list resumed>) = 0 [pid 7199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7200] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7199] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7199] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7200] memfd_create("syzkaller", 0) = 3 [pid 7200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7200] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7200] munmap(0x7feef78ae000, 2097152) = 0 [pid 7200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7200] close(3) = 0 [pid 7200] mkdir("./file0", 0777) = 0 [pid 7200] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7200] chdir("./file0") = 0 [pid 7200] ioctl(4, LOOP_CLR_FD) = 0 [pid 7200] close(4) = 0 [pid 7200] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7199] <... futex resumed>) = 0 [pid 7200] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7199] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7199] <... futex resumed>) = 0 [pid 7200] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7199] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7200] <... openat resumed>) = 4 [pid 7200] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7199] <... futex resumed>) = 0 [pid 7200] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7199] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7199] <... futex resumed>) = 0 [pid 7200] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7199] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7200] <... openat resumed>) = 5 [pid 7200] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7199] <... futex resumed>) = 0 [pid 7199] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7200] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 232.459666][ T7200] loop0: detected capacity change from 0 to 4096 [ 232.468962][ T7200] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.501769][ T7200] ntfs: volume version 3.1. [pid 7199] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7199] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7199] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7199] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7201 attached [pid 7201] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7199] <... clone3 resumed> => {parent_tid=[2159]}, 88) = 2159 [pid 7201] set_robust_list(0x7feef7aad9a0, 24 [pid 7199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7201] <... set_robust_list resumed>) = 0 [pid 7199] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7201] rt_sigprocmask(SIG_SETMASK, [], [pid 7199] <... futex resumed>) = 0 [pid 7201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7199] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7201] ftruncate(4, 0) = 0 [pid 7201] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7200] <... write resumed>) = 1048064 [pid 7201] <... futex resumed>) = 1 [pid 7199] <... futex resumed>) = 0 [pid 7200] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7201] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7199] close(3 [pid 7200] <... futex resumed>) = 0 [pid 7199] <... close resumed>) = 0 [pid 7200] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7199] close(4) = 0 [pid 7199] close(5) = 0 [pid 7199] close(6) = -1 EBADF (Bad file descriptor) [pid 7199] close(7) = -1 EBADF (Bad file descriptor) [pid 7199] close(8) = -1 EBADF (Bad file descriptor) [pid 7199] close(9) = -1 EBADF (Bad file descriptor) [pid 7199] close(10) = -1 EBADF (Bad file descriptor) [pid 7199] close(11) = -1 EBADF (Bad file descriptor) [pid 7199] close(12) = -1 EBADF (Bad file descriptor) [pid 7199] close(13) = -1 EBADF (Bad file descriptor) [pid 7199] close(14) = -1 EBADF (Bad file descriptor) [pid 7199] close(15) = -1 EBADF (Bad file descriptor) [pid 7199] close(16) = -1 EBADF (Bad file descriptor) [pid 7199] close(17) = -1 EBADF (Bad file descriptor) [pid 7199] close(18) = -1 EBADF (Bad file descriptor) [pid 7199] close(19) = -1 EBADF (Bad file descriptor) [pid 7199] close(20) = -1 EBADF (Bad file descriptor) [pid 7199] close(21) = -1 EBADF (Bad file descriptor) [pid 7199] close(22) = -1 EBADF (Bad file descriptor) [pid 7199] close(23) = -1 EBADF (Bad file descriptor) [pid 7199] close(24) = -1 EBADF (Bad file descriptor) [pid 7199] close(25) = -1 EBADF (Bad file descriptor) [pid 7199] close(26) = -1 EBADF (Bad file descriptor) [pid 7199] close(27) = -1 EBADF (Bad file descriptor) [pid 7199] close(28) = -1 EBADF (Bad file descriptor) [pid 7199] close(29) = -1 EBADF (Bad file descriptor) [pid 7199] exit_group(0) = ? [pid 7201] <... futex resumed>) = ? [pid 7200] <... futex resumed>) = ? [pid 7201] +++ exited with 0 +++ [pid 7200] +++ exited with 0 +++ [pid 7199] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2157, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./725", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./725", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./725/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./725/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./725/cgroup.cpu") = 0 [pid 5028] umount2("./725/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./725/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./725/binderfs") = 0 [pid 5028] umount2("./725/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./725/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./725/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./725/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./725/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./725/file0") = 0 [pid 5028] umount2("./725/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./725/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./725/cgroup") = 0 [pid 5028] umount2("./725/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./725/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./725/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./725") = 0 [pid 5028] mkdir("./726", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7202 attached , child_tidptr=0x5555563a5690) = 2160 [pid 7202] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7202] chdir("./726") = 0 [pid 7202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7202] setpgid(0, 0) = 0 [pid 7202] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7202] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7202] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7202] write(3, "1000", 4) = 4 [pid 7202] close(3) = 0 [pid 7202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7202] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7202] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7202] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7202] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7202] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7203 attached [pid 7203] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7202] <... clone3 resumed> => {parent_tid=[2161]}, 88) = 2161 [pid 7203] <... rseq resumed>) = 0 [pid 7202] rt_sigprocmask(SIG_SETMASK, [], [pid 7203] set_robust_list(0x7feeffcce9a0, 24 [pid 7202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7203] <... set_robust_list resumed>) = 0 [pid 7203] rt_sigprocmask(SIG_SETMASK, [], [pid 7202] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7202] <... futex resumed>) = 0 [pid 7202] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7203] memfd_create("syzkaller", 0) = 3 [pid 7203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7203] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7203] munmap(0x7feef78ae000, 2097152) = 0 [pid 7203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7203] close(3) = 0 [pid 7203] mkdir("./file0", 0777) = 0 [pid 7203] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7203] chdir("./file0") = 0 [pid 7203] ioctl(4, LOOP_CLR_FD) = 0 [pid 7203] close(4) = 0 [pid 7203] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7202] <... futex resumed>) = 0 [pid 7202] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7202] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7203] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7202] <... futex resumed>) = 0 [pid 7202] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7202] <... futex resumed>) = 0 [pid 7203] <... openat resumed>) = 5 [pid 7202] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7203] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7202] <... futex resumed>) = 0 [pid 7202] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7202] <... futex resumed>) = 0 [ 232.681913][ T7203] loop0: detected capacity change from 0 to 4096 [ 232.690781][ T7203] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.723422][ T7203] ntfs: volume version 3.1. [pid 7202] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7202] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7202] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7202] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2162]}, 88) = 2162 [pid 7202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7202] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7202] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7204 attached [pid 7204] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7204] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7204] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7204] ftruncate(4, 0) = 0 [pid 7204] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7203] <... write resumed>) = 1048064 [pid 7204] <... futex resumed>) = 1 [pid 7203] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7202] <... futex resumed>) = 0 [pid 7204] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7203] <... futex resumed>) = 0 [pid 7202] close(3 [pid 7203] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7202] <... close resumed>) = 0 [pid 7202] close(4) = 0 [pid 7202] close(5) = 0 [pid 7202] close(6) = -1 EBADF (Bad file descriptor) [pid 7202] close(7) = -1 EBADF (Bad file descriptor) [pid 7202] close(8) = -1 EBADF (Bad file descriptor) [pid 7202] close(9) = -1 EBADF (Bad file descriptor) [pid 7202] close(10) = -1 EBADF (Bad file descriptor) [pid 7202] close(11) = -1 EBADF (Bad file descriptor) [pid 7202] close(12) = -1 EBADF (Bad file descriptor) [pid 7202] close(13) = -1 EBADF (Bad file descriptor) [pid 7202] close(14) = -1 EBADF (Bad file descriptor) [pid 7202] close(15) = -1 EBADF (Bad file descriptor) [pid 7202] close(16) = -1 EBADF (Bad file descriptor) [pid 7202] close(17) = -1 EBADF (Bad file descriptor) [pid 7202] close(18) = -1 EBADF (Bad file descriptor) [pid 7202] close(19) = -1 EBADF (Bad file descriptor) [pid 7202] close(20) = -1 EBADF (Bad file descriptor) [pid 7202] close(21) = -1 EBADF (Bad file descriptor) [pid 7202] close(22) = -1 EBADF (Bad file descriptor) [pid 7202] close(23) = -1 EBADF (Bad file descriptor) [pid 7202] close(24) = -1 EBADF (Bad file descriptor) [pid 7202] close(25) = -1 EBADF (Bad file descriptor) [pid 7202] close(26) = -1 EBADF (Bad file descriptor) [pid 7202] close(27) = -1 EBADF (Bad file descriptor) [pid 7202] close(28) = -1 EBADF (Bad file descriptor) [pid 7202] close(29) = -1 EBADF (Bad file descriptor) [pid 7202] exit_group(0 [pid 7203] <... futex resumed>) = ? [pid 7204] <... futex resumed>) = ? [pid 7203] +++ exited with 0 +++ [pid 7204] +++ exited with 0 +++ [pid 7202] <... exit_group resumed>) = ? [pid 7202] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2160, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./726", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./726", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./726/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./726/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./726/cgroup.cpu") = 0 [pid 5028] umount2("./726/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./726/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./726/binderfs") = 0 [pid 5028] umount2("./726/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./726/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./726/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./726/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./726/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./726/file0") = 0 [pid 5028] umount2("./726/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./726/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./726/cgroup") = 0 [pid 5028] umount2("./726/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./726/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./726/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./726") = 0 [pid 5028] mkdir("./727", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7205 attached , child_tidptr=0x5555563a5690) = 2163 [pid 7205] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7205] chdir("./727") = 0 [pid 7205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7205] setpgid(0, 0) = 0 [pid 7205] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7205] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7205] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7205] write(3, "1000", 4) = 4 [pid 7205] close(3) = 0 [pid 7205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7205] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7205] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7205] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7205] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7206 attached [pid 7206] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7205] <... clone3 resumed> => {parent_tid=[2164]}, 88) = 2164 [pid 7205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7205] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... rseq resumed>) = 0 [pid 7205] <... futex resumed>) = 0 [pid 7206] set_robust_list(0x7feeffcce9a0, 24 [pid 7205] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7206] <... set_robust_list resumed>) = 0 [pid 7206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7206] memfd_create("syzkaller", 0) = 3 [pid 7206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7206] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7206] munmap(0x7feef78ae000, 2097152) = 0 [pid 7206] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7206] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7206] close(3) = 0 [pid 7206] mkdir("./file0", 0777) = 0 [pid 7206] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7206] chdir("./file0") = 0 [pid 7206] ioctl(4, LOOP_CLR_FD) = 0 [pid 7206] close(4) = 0 [pid 7206] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7205] <... futex resumed>) = 0 [pid 7206] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7205] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7206] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7205] <... futex resumed>) = 0 [pid 7205] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7206] <... openat resumed>) = 4 [pid 7206] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] <... futex resumed>) = 0 [pid 7205] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7205] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7206] <... futex resumed>) = 1 [pid 7206] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7206] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] <... futex resumed>) = 0 [pid 7206] <... futex resumed>) = 1 [pid 7205] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7205] <... futex resumed>) = 0 [ 232.932480][ T7206] loop0: detected capacity change from 0 to 4096 [ 232.941989][ T7206] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.974028][ T7206] ntfs: volume version 3.1. [pid 7205] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7205] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7205] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7207 attached [pid 7207] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7205] <... clone3 resumed> => {parent_tid=[2165]}, 88) = 2165 [pid 7207] set_robust_list(0x7feef7aad9a0, 24 [pid 7205] rt_sigprocmask(SIG_SETMASK, [], [pid 7207] <... set_robust_list resumed>) = 0 [pid 7207] rt_sigprocmask(SIG_SETMASK, [], [pid 7205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7205] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7207] ftruncate(4, 0 [pid 7205] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7207] <... ftruncate resumed>) = 0 [pid 7207] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7206] <... write resumed>) = 1048064 [pid 7206] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7205] <... futex resumed>) = 0 [pid 7207] <... futex resumed>) = 1 [pid 7206] <... futex resumed>) = 0 [pid 7207] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7206] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7205] close(3) = 0 [pid 7205] close(4) = 0 [pid 7205] close(5) = 0 [pid 7205] close(6) = -1 EBADF (Bad file descriptor) [pid 7205] close(7) = -1 EBADF (Bad file descriptor) [pid 7205] close(8) = -1 EBADF (Bad file descriptor) [pid 7205] close(9) = -1 EBADF (Bad file descriptor) [pid 7205] close(10) = -1 EBADF (Bad file descriptor) [pid 7205] close(11) = -1 EBADF (Bad file descriptor) [pid 7205] close(12) = -1 EBADF (Bad file descriptor) [pid 7205] close(13) = -1 EBADF (Bad file descriptor) [pid 7205] close(14) = -1 EBADF (Bad file descriptor) [pid 7205] close(15) = -1 EBADF (Bad file descriptor) [pid 7205] close(16) = -1 EBADF (Bad file descriptor) [pid 7205] close(17) = -1 EBADF (Bad file descriptor) [pid 7205] close(18) = -1 EBADF (Bad file descriptor) [pid 7205] close(19) = -1 EBADF (Bad file descriptor) [pid 7205] close(20) = -1 EBADF (Bad file descriptor) [pid 7205] close(21) = -1 EBADF (Bad file descriptor) [pid 7205] close(22) = -1 EBADF (Bad file descriptor) [pid 7205] close(23) = -1 EBADF (Bad file descriptor) [pid 7205] close(24) = -1 EBADF (Bad file descriptor) [pid 7205] close(25) = -1 EBADF (Bad file descriptor) [pid 7205] close(26) = -1 EBADF (Bad file descriptor) [pid 7205] close(27) = -1 EBADF (Bad file descriptor) [pid 7205] close(28) = -1 EBADF (Bad file descriptor) [pid 7205] close(29) = -1 EBADF (Bad file descriptor) [pid 7205] exit_group(0 [pid 7207] <... futex resumed>) = ? [pid 7206] <... futex resumed>) = ? [pid 7207] +++ exited with 0 +++ [pid 7206] +++ exited with 0 +++ [pid 7205] <... exit_group resumed>) = ? [pid 7205] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2163, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./727", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./727", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./727/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./727/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./727/cgroup.cpu") = 0 [pid 5028] umount2("./727/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./727/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./727/binderfs") = 0 [pid 5028] umount2("./727/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./727/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./727/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./727/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./727/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./727/file0") = 0 [pid 5028] umount2("./727/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./727/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./727/cgroup") = 0 [pid 5028] umount2("./727/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./727/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./727/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./727") = 0 [pid 5028] mkdir("./728", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7208 attached , child_tidptr=0x5555563a5690) = 2166 [pid 7208] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7208] chdir("./728") = 0 [pid 7208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7208] setpgid(0, 0) = 0 [pid 7208] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7208] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7208] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7208] write(3, "1000", 4) = 4 [pid 7208] close(3) = 0 [pid 7208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7208] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7208] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7208] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7208] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7208] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7208] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7209 attached => {parent_tid=[2167]}, 88) = 2167 [pid 7209] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7208] rt_sigprocmask(SIG_SETMASK, [], [pid 7209] <... rseq resumed>) = 0 [pid 7209] set_robust_list(0x7feeffcce9a0, 24 [pid 7208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7209] <... set_robust_list resumed>) = 0 [pid 7208] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7208] <... futex resumed>) = 0 [pid 7209] memfd_create("syzkaller", 0) = 3 [pid 7208] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7209] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7209] munmap(0x7feef78ae000, 2097152) = 0 [pid 7209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7209] close(3) = 0 [pid 7209] mkdir("./file0", 0777) = 0 [pid 7209] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7209] chdir("./file0") = 0 [pid 7209] ioctl(4, LOOP_CLR_FD) = 0 [pid 7209] close(4) = 0 [pid 7209] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] <... futex resumed>) = 0 [pid 7209] <... futex resumed>) = 1 [pid 7209] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7208] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7208] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] <... openat resumed>) = 4 [pid 7209] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7208] <... futex resumed>) = 0 [pid 7209] <... futex resumed>) = 1 [pid 7208] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7208] <... futex resumed>) = 0 [pid 7208] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7209] <... openat resumed>) = 5 [pid 7209] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7208] <... futex resumed>) = 0 [pid 7208] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7208] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 233.172182][ T7209] loop0: detected capacity change from 0 to 4096 [ 233.181324][ T7209] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 233.212998][ T7209] ntfs: volume version 3.1. [pid 7209] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7208] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7208] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7208] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7208] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7208] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7210 attached [pid 7210] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7210] set_robust_list(0x7feef7aad9a0, 24 [pid 7208] <... clone3 resumed> => {parent_tid=[2168]}, 88) = 2168 [pid 7210] <... set_robust_list resumed>) = 0 [pid 7208] rt_sigprocmask(SIG_SETMASK, [], [pid 7210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7210] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7208] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7208] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7210] ftruncate(4, 0) = 0 [pid 7209] <... write resumed>) = 1048064 [pid 7210] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7209] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7210] <... futex resumed>) = 1 [pid 7208] <... futex resumed>) = 0 [pid 7208] close(3 [pid 7210] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7209] <... futex resumed>) = 0 [pid 7208] <... close resumed>) = 0 [pid 7209] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7208] close(4) = 0 [pid 7208] close(5) = 0 [pid 7208] close(6) = -1 EBADF (Bad file descriptor) [pid 7208] close(7) = -1 EBADF (Bad file descriptor) [pid 7208] close(8) = -1 EBADF (Bad file descriptor) [pid 7208] close(9) = -1 EBADF (Bad file descriptor) [pid 7208] close(10) = -1 EBADF (Bad file descriptor) [pid 7208] close(11) = -1 EBADF (Bad file descriptor) [pid 7208] close(12) = -1 EBADF (Bad file descriptor) [pid 7208] close(13) = -1 EBADF (Bad file descriptor) [pid 7208] close(14) = -1 EBADF (Bad file descriptor) [pid 7208] close(15) = -1 EBADF (Bad file descriptor) [pid 7208] close(16) = -1 EBADF (Bad file descriptor) [pid 7208] close(17) = -1 EBADF (Bad file descriptor) [pid 7208] close(18) = -1 EBADF (Bad file descriptor) [pid 7208] close(19) = -1 EBADF (Bad file descriptor) [pid 7208] close(20) = -1 EBADF (Bad file descriptor) [pid 7208] close(21) = -1 EBADF (Bad file descriptor) [pid 7208] close(22) = -1 EBADF (Bad file descriptor) [pid 7208] close(23) = -1 EBADF (Bad file descriptor) [pid 7208] close(24) = -1 EBADF (Bad file descriptor) [pid 7208] close(25) = -1 EBADF (Bad file descriptor) [pid 7208] close(26) = -1 EBADF (Bad file descriptor) [pid 7208] close(27) = -1 EBADF (Bad file descriptor) [pid 7208] close(28) = -1 EBADF (Bad file descriptor) [pid 7208] close(29) = -1 EBADF (Bad file descriptor) [pid 7208] exit_group(0 [pid 7210] <... futex resumed>) = ? [pid 7209] <... futex resumed>) = ? [pid 7208] <... exit_group resumed>) = ? [pid 7210] +++ exited with 0 +++ [pid 7209] +++ exited with 0 +++ [pid 7208] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2166, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./728", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./728", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./728/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./728/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./728/cgroup.cpu") = 0 [pid 5028] umount2("./728/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./728/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./728/binderfs") = 0 [pid 5028] umount2("./728/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./728/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./728/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./728/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./728/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./728/file0") = 0 [pid 5028] umount2("./728/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./728/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./728/cgroup") = 0 [pid 5028] umount2("./728/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./728/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./728/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./728") = 0 [pid 5028] mkdir("./729", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7211 attached , child_tidptr=0x5555563a5690) = 2169 [pid 7211] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7211] chdir("./729") = 0 [pid 7211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7211] setpgid(0, 0) = 0 [pid 7211] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7211] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7211] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7211] write(3, "1000", 4) = 4 [pid 7211] close(3) = 0 [pid 7211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7211] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7211] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7211] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7211] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7211] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7211] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7212 attached => {parent_tid=[2170]}, 88) = 2170 [pid 7211] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7211] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7211] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7212] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7212] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7212] memfd_create("syzkaller", 0) = 3 [pid 7212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7212] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7212] munmap(0x7feef78ae000, 2097152) = 0 [pid 7212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7212] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7212] close(3) = 0 [pid 7212] mkdir("./file0", 0777) = 0 [pid 7212] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7212] chdir("./file0") = 0 [pid 7212] ioctl(4, LOOP_CLR_FD) = 0 [pid 7212] close(4) = 0 [pid 7212] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7211] <... futex resumed>) = 0 [pid 7212] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7211] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7211] <... futex resumed>) = 0 [pid 7212] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7211] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7212] <... openat resumed>) = 4 [pid 7212] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7211] <... futex resumed>) = 0 [pid 7211] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7211] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7212] <... futex resumed>) = 1 [pid 7212] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7212] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7211] <... futex resumed>) = 0 [pid 7212] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7211] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7211] <... futex resumed>) = 0 [pid 7212] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 233.432767][ T7212] loop0: detected capacity change from 0 to 4096 [ 233.442198][ T7212] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 233.474762][ T7212] ntfs: volume version 3.1. [pid 7211] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7211] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7211] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7211] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7211] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7213 attached => {parent_tid=[2171]}, 88) = 2171 [pid 7213] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7211] rt_sigprocmask(SIG_SETMASK, [], [pid 7213] <... rseq resumed>) = 0 [pid 7211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7213] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7213] rt_sigprocmask(SIG_SETMASK, [], [pid 7211] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7211] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7213] ftruncate(4, 0) = 0 [pid 7212] <... write resumed>) = 1048064 [pid 7213] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7212] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7212] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7211] <... futex resumed>) = 0 [pid 7211] close(3) = 0 [pid 7211] close(4 [pid 7213] <... futex resumed>) = 1 [pid 7211] <... close resumed>) = 0 [pid 7213] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7211] close(5) = 0 [pid 7211] close(6) = -1 EBADF (Bad file descriptor) [pid 7211] close(7) = -1 EBADF (Bad file descriptor) [pid 7211] close(8) = -1 EBADF (Bad file descriptor) [pid 7211] close(9) = -1 EBADF (Bad file descriptor) [pid 7211] close(10) = -1 EBADF (Bad file descriptor) [pid 7211] close(11) = -1 EBADF (Bad file descriptor) [pid 7211] close(12) = -1 EBADF (Bad file descriptor) [pid 7211] close(13) = -1 EBADF (Bad file descriptor) [pid 7211] close(14) = -1 EBADF (Bad file descriptor) [pid 7211] close(15) = -1 EBADF (Bad file descriptor) [pid 7211] close(16) = -1 EBADF (Bad file descriptor) [pid 7211] close(17) = -1 EBADF (Bad file descriptor) [pid 7211] close(18) = -1 EBADF (Bad file descriptor) [pid 7211] close(19) = -1 EBADF (Bad file descriptor) [pid 7211] close(20) = -1 EBADF (Bad file descriptor) [pid 7211] close(21) = -1 EBADF (Bad file descriptor) [pid 7211] close(22) = -1 EBADF (Bad file descriptor) [pid 7211] close(23) = -1 EBADF (Bad file descriptor) [pid 7211] close(24) = -1 EBADF (Bad file descriptor) [pid 7211] close(25) = -1 EBADF (Bad file descriptor) [pid 7211] close(26) = -1 EBADF (Bad file descriptor) [pid 7211] close(27) = -1 EBADF (Bad file descriptor) [pid 7211] close(28) = -1 EBADF (Bad file descriptor) [pid 7211] close(29) = -1 EBADF (Bad file descriptor) [pid 7211] exit_group(0) = ? [pid 7212] <... futex resumed>) = ? [pid 7213] <... futex resumed>) = ? [pid 7212] +++ exited with 0 +++ [pid 7213] +++ exited with 0 +++ [pid 7211] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2169, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./729", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./729", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./729/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./729/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./729/cgroup.cpu") = 0 [pid 5028] umount2("./729/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./729/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./729/binderfs") = 0 [pid 5028] umount2("./729/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./729/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./729/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./729/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./729/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./729/file0") = 0 [pid 5028] umount2("./729/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./729/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./729/cgroup") = 0 [pid 5028] umount2("./729/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./729/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./729/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./729") = 0 [pid 5028] mkdir("./730", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7214 attached [pid 7214] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2172 [pid 7214] <... set_robust_list resumed>) = 0 [pid 7214] chdir("./730") = 0 [pid 7214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7214] setpgid(0, 0) = 0 [pid 7214] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7214] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7214] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7214] write(3, "1000", 4) = 4 [pid 7214] close(3) = 0 [pid 7214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7214] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7214] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7214] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7214] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7214] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7215 attached [pid 7215] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7214] <... clone3 resumed> => {parent_tid=[2173]}, 88) = 2173 [pid 7215] <... rseq resumed>) = 0 [pid 7214] rt_sigprocmask(SIG_SETMASK, [], [pid 7215] set_robust_list(0x7feeffcce9a0, 24 [pid 7214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7215] <... set_robust_list resumed>) = 0 [pid 7215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7214] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7215] memfd_create("syzkaller", 0 [pid 7214] <... futex resumed>) = 0 [pid 7214] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7215] <... memfd_create resumed>) = 3 [pid 7215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7215] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7215] munmap(0x7feef78ae000, 2097152) = 0 [pid 7215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7215] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7215] close(3) = 0 [pid 7215] mkdir("./file0", 0777) = 0 [pid 7215] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7215] chdir("./file0") = 0 [pid 7215] ioctl(4, LOOP_CLR_FD) = 0 [pid 7215] close(4) = 0 [pid 7215] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7214] <... futex resumed>) = 0 [pid 7215] <... futex resumed>) = 1 [pid 7214] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7215] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7214] <... futex resumed>) = 0 [pid 7214] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7215] <... openat resumed>) = 4 [pid 7215] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7214] <... futex resumed>) = 0 [pid 7215] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7214] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7214] <... futex resumed>) = 0 [pid 7215] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7214] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7215] <... openat resumed>) = 5 [pid 7215] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7214] <... futex resumed>) = 0 [pid 7215] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7214] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7215] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7214] <... futex resumed>) = 0 [pid 7215] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 233.667315][ T7215] loop0: detected capacity change from 0 to 4096 [ 233.676186][ T7215] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 233.709167][ T7215] ntfs: volume version 3.1. [pid 7214] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7214] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7214] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7214] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7216 attached => {parent_tid=[2174]}, 88) = 2174 [pid 7216] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7214] rt_sigprocmask(SIG_SETMASK, [], [pid 7216] <... rseq resumed>) = 0 [pid 7214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7216] set_robust_list(0x7feef7aad9a0, 24 [pid 7214] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7216] <... set_robust_list resumed>) = 0 [pid 7214] <... futex resumed>) = 0 [pid 7216] rt_sigprocmask(SIG_SETMASK, [], [pid 7214] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7216] ftruncate(4, 0) = 0 [pid 7215] <... write resumed>) = 1048064 [pid 7216] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7216] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7214] <... futex resumed>) = 0 [pid 7215] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7215] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7214] close(3) = 0 [pid 7214] close(4) = 0 [pid 7214] close(5) = 0 [pid 7214] close(6) = -1 EBADF (Bad file descriptor) [pid 7214] close(7) = -1 EBADF (Bad file descriptor) [pid 7214] close(8) = -1 EBADF (Bad file descriptor) [pid 7214] close(9) = -1 EBADF (Bad file descriptor) [pid 7214] close(10) = -1 EBADF (Bad file descriptor) [pid 7214] close(11) = -1 EBADF (Bad file descriptor) [pid 7214] close(12) = -1 EBADF (Bad file descriptor) [pid 7214] close(13) = -1 EBADF (Bad file descriptor) [pid 7214] close(14) = -1 EBADF (Bad file descriptor) [pid 7214] close(15) = -1 EBADF (Bad file descriptor) [pid 7214] close(16) = -1 EBADF (Bad file descriptor) [pid 7214] close(17) = -1 EBADF (Bad file descriptor) [pid 7214] close(18) = -1 EBADF (Bad file descriptor) [pid 7214] close(19) = -1 EBADF (Bad file descriptor) [pid 7214] close(20) = -1 EBADF (Bad file descriptor) [pid 7214] close(21) = -1 EBADF (Bad file descriptor) [pid 7214] close(22) = -1 EBADF (Bad file descriptor) [pid 7214] close(23) = -1 EBADF (Bad file descriptor) [pid 7214] close(24) = -1 EBADF (Bad file descriptor) [pid 7214] close(25) = -1 EBADF (Bad file descriptor) [pid 7214] close(26) = -1 EBADF (Bad file descriptor) [pid 7214] close(27) = -1 EBADF (Bad file descriptor) [pid 7214] close(28) = -1 EBADF (Bad file descriptor) [pid 7214] close(29) = -1 EBADF (Bad file descriptor) [pid 7214] exit_group(0 [pid 7216] <... futex resumed>) = ? [pid 7216] +++ exited with 0 +++ [pid 7215] <... futex resumed>) = ? [pid 7214] <... exit_group resumed>) = ? [pid 7215] +++ exited with 0 +++ [pid 7214] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2172, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./730", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./730", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./730/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./730/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./730/cgroup.cpu") = 0 [pid 5028] umount2("./730/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./730/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./730/binderfs") = 0 [pid 5028] umount2("./730/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./730/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./730/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./730/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./730/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./730/file0") = 0 [pid 5028] umount2("./730/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./730/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./730/cgroup") = 0 [pid 5028] umount2("./730/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./730/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./730/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./730") = 0 [pid 5028] mkdir("./731", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7217 attached , child_tidptr=0x5555563a5690) = 2175 [pid 7217] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7217] chdir("./731") = 0 [pid 7217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7217] setpgid(0, 0) = 0 [pid 7217] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7217] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7217] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7217] write(3, "1000", 4) = 4 [pid 7217] close(3) = 0 [pid 7217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7217] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7217] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7217] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7217] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7217] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7217] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7218 attached [pid 7218] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7217] <... clone3 resumed> => {parent_tid=[2176]}, 88) = 2176 [pid 7218] set_robust_list(0x7feeffcce9a0, 24 [pid 7217] rt_sigprocmask(SIG_SETMASK, [], [pid 7218] <... set_robust_list resumed>) = 0 [pid 7217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7217] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7217] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7218] memfd_create("syzkaller", 0) = 3 [pid 7218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7218] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7218] munmap(0x7feef78ae000, 2097152) = 0 [pid 7218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7218] close(3) = 0 [pid 7218] mkdir("./file0", 0777) = 0 [pid 7218] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7218] chdir("./file0") = 0 [pid 7218] ioctl(4, LOOP_CLR_FD) = 0 [pid 7218] close(4) = 0 [pid 7218] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7218] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7217] <... futex resumed>) = 0 [pid 7217] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7218] <... futex resumed>) = 0 [pid 7217] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7218] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7218] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7217] <... futex resumed>) = 0 [pid 7218] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7217] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7218] <... openat resumed>) = 5 [pid 7217] <... futex resumed>) = 0 [pid 7218] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7217] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7218] <... futex resumed>) = 0 [pid 7217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7218] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7217] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 233.898589][ T7218] loop0: detected capacity change from 0 to 4096 [ 233.920032][ T7218] ntfs: volume version 3.1. [pid 7217] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7217] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7217] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7217] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7217] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7219 attached [pid 7219] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7219] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7219] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7217] <... clone3 resumed> => {parent_tid=[2177]}, 88) = 2177 [pid 7217] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7217] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7219] <... futex resumed>) = 0 [pid 7219] ftruncate(4, 0 [pid 7217] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7219] <... ftruncate resumed>) = 0 [pid 7219] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7217] <... futex resumed>) = 0 [pid 7219] <... futex resumed>) = 1 [pid 7219] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7218] <... write resumed>) = 1048064 [pid 7218] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7218] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7217] close(3) = 0 [pid 7217] close(4) = 0 [pid 7217] close(5) = 0 [pid 7217] close(6) = -1 EBADF (Bad file descriptor) [pid 7217] close(7) = -1 EBADF (Bad file descriptor) [pid 7217] close(8) = -1 EBADF (Bad file descriptor) [pid 7217] close(9) = -1 EBADF (Bad file descriptor) [pid 7217] close(10) = -1 EBADF (Bad file descriptor) [pid 7217] close(11) = -1 EBADF (Bad file descriptor) [pid 7217] close(12) = -1 EBADF (Bad file descriptor) [pid 7217] close(13) = -1 EBADF (Bad file descriptor) [pid 7217] close(14) = -1 EBADF (Bad file descriptor) [pid 7217] close(15) = -1 EBADF (Bad file descriptor) [pid 7217] close(16) = -1 EBADF (Bad file descriptor) [pid 7217] close(17) = -1 EBADF (Bad file descriptor) [pid 7217] close(18) = -1 EBADF (Bad file descriptor) [pid 7217] close(19) = -1 EBADF (Bad file descriptor) [pid 7217] close(20) = -1 EBADF (Bad file descriptor) [pid 7217] close(21) = -1 EBADF (Bad file descriptor) [pid 7217] close(22) = -1 EBADF (Bad file descriptor) [pid 7217] close(23) = -1 EBADF (Bad file descriptor) [pid 7217] close(24) = -1 EBADF (Bad file descriptor) [pid 7217] close(25) = -1 EBADF (Bad file descriptor) [pid 7217] close(26) = -1 EBADF (Bad file descriptor) [pid 7217] close(27) = -1 EBADF (Bad file descriptor) [pid 7217] close(28) = -1 EBADF (Bad file descriptor) [pid 7217] close(29) = -1 EBADF (Bad file descriptor) [pid 7217] exit_group(0 [pid 7219] <... futex resumed>) = ? [pid 7219] +++ exited with 0 +++ [pid 7218] <... futex resumed>) = ? [pid 7217] <... exit_group resumed>) = ? [pid 7218] +++ exited with 0 +++ [pid 7217] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2175, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./731", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./731", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./731/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./731/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./731/cgroup.cpu") = 0 [pid 5028] umount2("./731/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./731/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./731/binderfs") = 0 [pid 5028] umount2("./731/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./731/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./731/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./731/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./731/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./731/file0") = 0 [pid 5028] umount2("./731/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./731/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./731/cgroup") = 0 [pid 5028] umount2("./731/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./731/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./731/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./731") = 0 [pid 5028] mkdir("./732", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7220 attached , child_tidptr=0x5555563a5690) = 2178 [pid 7220] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7220] chdir("./732") = 0 [pid 7220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7220] setpgid(0, 0) = 0 [pid 7220] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7220] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7220] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7220] write(3, "1000", 4) = 4 [pid 7220] close(3) = 0 [pid 7220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7220] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7220] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7220] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7220] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7220] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7221 attached [pid 7221] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7220] <... clone3 resumed> => {parent_tid=[2179]}, 88) = 2179 [pid 7221] <... rseq resumed>) = 0 [pid 7220] rt_sigprocmask(SIG_SETMASK, [], [pid 7221] set_robust_list(0x7feeffcce9a0, 24 [pid 7220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7221] <... set_robust_list resumed>) = 0 [pid 7220] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7220] <... futex resumed>) = 0 [pid 7220] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7221] memfd_create("syzkaller", 0) = 3 [pid 7221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7221] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7221] munmap(0x7feef78ae000, 2097152) = 0 [pid 7221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7221] close(3) = 0 [pid 7221] mkdir("./file0", 0777) = 0 [pid 7221] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7221] chdir("./file0") = 0 [pid 7221] ioctl(4, LOOP_CLR_FD) = 0 [pid 7221] close(4) = 0 [pid 7221] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7220] <... futex resumed>) = 0 [pid 7221] <... futex resumed>) = 1 [pid 7220] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7220] <... futex resumed>) = 0 [pid 7220] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7221] <... openat resumed>) = 4 [pid 7221] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7220] <... futex resumed>) = 0 [pid 7220] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] <... futex resumed>) = 1 [pid 7220] <... futex resumed>) = 0 [pid 7220] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7221] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7221] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7220] <... futex resumed>) = 0 [pid 7221] <... futex resumed>) = 1 [pid 7220] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7220] <... futex resumed>) = 0 [ 234.119134][ T7221] loop0: detected capacity change from 0 to 4096 [ 234.140781][ T7221] ntfs: volume version 3.1. [pid 7220] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7220] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7220] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7220] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7220] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2180]}, 88) = 2180 [pid 7220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7220] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7220] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7222 attached [pid 7222] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7222] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7222] ftruncate(4, 0) = 0 [pid 7222] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7221] <... write resumed>) = 1048064 [pid 7221] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7221] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7222] <... futex resumed>) = 1 [pid 7220] <... futex resumed>) = 0 [pid 7222] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7220] close(3) = 0 [pid 7220] close(4) = 0 [pid 7220] close(5) = 0 [pid 7220] close(6) = -1 EBADF (Bad file descriptor) [pid 7220] close(7) = -1 EBADF (Bad file descriptor) [pid 7220] close(8) = -1 EBADF (Bad file descriptor) [pid 7220] close(9) = -1 EBADF (Bad file descriptor) [pid 7220] close(10) = -1 EBADF (Bad file descriptor) [pid 7220] close(11) = -1 EBADF (Bad file descriptor) [pid 7220] close(12) = -1 EBADF (Bad file descriptor) [pid 7220] close(13) = -1 EBADF (Bad file descriptor) [pid 7220] close(14) = -1 EBADF (Bad file descriptor) [pid 7220] close(15) = -1 EBADF (Bad file descriptor) [pid 7220] close(16) = -1 EBADF (Bad file descriptor) [pid 7220] close(17) = -1 EBADF (Bad file descriptor) [pid 7220] close(18) = -1 EBADF (Bad file descriptor) [pid 7220] close(19) = -1 EBADF (Bad file descriptor) [pid 7220] close(20) = -1 EBADF (Bad file descriptor) [pid 7220] close(21) = -1 EBADF (Bad file descriptor) [pid 7220] close(22) = -1 EBADF (Bad file descriptor) [pid 7220] close(23) = -1 EBADF (Bad file descriptor) [pid 7220] close(24) = -1 EBADF (Bad file descriptor) [pid 7220] close(25) = -1 EBADF (Bad file descriptor) [pid 7220] close(26) = -1 EBADF (Bad file descriptor) [pid 7220] close(27) = -1 EBADF (Bad file descriptor) [pid 7220] close(28) = -1 EBADF (Bad file descriptor) [pid 7220] close(29) = -1 EBADF (Bad file descriptor) [pid 7220] exit_group(0) = ? [pid 7221] <... futex resumed>) = ? [pid 7221] +++ exited with 0 +++ [pid 7222] <... futex resumed>) = ? [pid 7222] +++ exited with 0 +++ [pid 7220] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2178, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./732", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./732", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./732/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./732/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./732/cgroup.cpu") = 0 [pid 5028] umount2("./732/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./732/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./732/binderfs") = 0 [pid 5028] umount2("./732/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./732/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./732/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./732/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./732/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./732/file0") = 0 [pid 5028] umount2("./732/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./732/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./732/cgroup") = 0 [pid 5028] umount2("./732/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./732/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./732/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./732") = 0 [pid 5028] mkdir("./733", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7223 attached , child_tidptr=0x5555563a5690) = 2181 [pid 7223] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7223] chdir("./733") = 0 [pid 7223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7223] setpgid(0, 0) = 0 [pid 7223] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7223] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7223] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7223] write(3, "1000", 4) = 4 [pid 7223] close(3) = 0 [pid 7223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7223] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7223] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7223] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7223] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7223] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7224 attached => {parent_tid=[2182]}, 88) = 2182 [pid 7224] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7223] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7223] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7223] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7224] <... rseq resumed>) = 0 [pid 7224] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7224] memfd_create("syzkaller", 0) = 3 [pid 7224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7224] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7224] munmap(0x7feef78ae000, 2097152) = 0 [pid 7224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7224] close(3) = 0 [pid 7224] mkdir("./file0", 0777) = 0 [pid 7224] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7224] chdir("./file0") = 0 [pid 7224] ioctl(4, LOOP_CLR_FD) = 0 [pid 7224] close(4) = 0 [pid 7224] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7224] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7223] <... futex resumed>) = 0 [pid 7223] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] <... futex resumed>) = 0 [pid 7223] <... futex resumed>) = 1 [pid 7224] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7223] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7224] <... openat resumed>) = 4 [pid 7224] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7223] <... futex resumed>) = 0 [pid 7224] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7223] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] <... openat resumed>) = 5 [pid 7224] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7223] <... futex resumed>) = 0 [pid 7223] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7224] <... futex resumed>) = 0 [pid 7223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7223] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7224] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 234.319707][ T7224] loop0: detected capacity change from 0 to 4096 [ 234.340035][ T7224] ntfs: volume version 3.1. [pid 7223] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7223] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7223] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7223] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7223] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7225 attached [pid 7225] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7225] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7225] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7223] <... clone3 resumed> => {parent_tid=[2183]}, 88) = 2183 [pid 7223] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7223] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... futex resumed>) = 0 [pid 7223] <... futex resumed>) = 1 [pid 7225] ftruncate(4, 0 [pid 7223] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7225] <... ftruncate resumed>) = 0 [pid 7224] <... write resumed>) = 1048064 [pid 7225] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7224] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7225] <... futex resumed>) = 1 [pid 7224] <... futex resumed>) = 0 [pid 7223] <... futex resumed>) = 0 [pid 7225] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7224] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7223] close(3) = 0 [pid 7223] close(4) = 0 [pid 7223] close(5) = 0 [pid 7223] close(6) = -1 EBADF (Bad file descriptor) [pid 7223] close(7) = -1 EBADF (Bad file descriptor) [pid 7223] close(8) = -1 EBADF (Bad file descriptor) [pid 7223] close(9) = -1 EBADF (Bad file descriptor) [pid 7223] close(10) = -1 EBADF (Bad file descriptor) [pid 7223] close(11) = -1 EBADF (Bad file descriptor) [pid 7223] close(12) = -1 EBADF (Bad file descriptor) [pid 7223] close(13) = -1 EBADF (Bad file descriptor) [pid 7223] close(14) = -1 EBADF (Bad file descriptor) [pid 7223] close(15) = -1 EBADF (Bad file descriptor) [pid 7223] close(16) = -1 EBADF (Bad file descriptor) [pid 7223] close(17) = -1 EBADF (Bad file descriptor) [pid 7223] close(18) = -1 EBADF (Bad file descriptor) [pid 7223] close(19) = -1 EBADF (Bad file descriptor) [pid 7223] close(20) = -1 EBADF (Bad file descriptor) [pid 7223] close(21) = -1 EBADF (Bad file descriptor) [pid 7223] close(22) = -1 EBADF (Bad file descriptor) [pid 7223] close(23) = -1 EBADF (Bad file descriptor) [pid 7223] close(24) = -1 EBADF (Bad file descriptor) [pid 7223] close(25) = -1 EBADF (Bad file descriptor) [pid 7223] close(26) = -1 EBADF (Bad file descriptor) [pid 7223] close(27) = -1 EBADF (Bad file descriptor) [pid 7223] close(28) = -1 EBADF (Bad file descriptor) [pid 7223] close(29) = -1 EBADF (Bad file descriptor) [pid 7223] exit_group(0 [pid 7225] <... futex resumed>) = ? [pid 7225] +++ exited with 0 +++ [pid 7224] <... futex resumed>) = ? [pid 7223] <... exit_group resumed>) = ? [pid 7224] +++ exited with 0 +++ [pid 7223] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2181, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./733", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./733", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./733/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./733/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./733/cgroup.cpu") = 0 [pid 5028] umount2("./733/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./733/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./733/binderfs") = 0 [pid 5028] umount2("./733/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./733/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./733/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./733/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./733/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./733/file0") = 0 [pid 5028] umount2("./733/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./733/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./733/cgroup") = 0 [pid 5028] umount2("./733/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./733/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./733/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./733") = 0 [pid 5028] mkdir("./734", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7226 attached , child_tidptr=0x5555563a5690) = 2184 [pid 7226] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7226] chdir("./734") = 0 [pid 7226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7226] setpgid(0, 0) = 0 [pid 7226] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7226] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7226] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7226] write(3, "1000", 4) = 4 [pid 7226] close(3) = 0 [pid 7226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7226] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7226] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7226] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7226] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7227 attached => {parent_tid=[2185]}, 88) = 2185 [pid 7227] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7226] rt_sigprocmask(SIG_SETMASK, [], [pid 7227] set_robust_list(0x7feeffcce9a0, 24 [pid 7226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7227] <... set_robust_list resumed>) = 0 [pid 7226] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7227] rt_sigprocmask(SIG_SETMASK, [], [pid 7226] <... futex resumed>) = 0 [pid 7227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7226] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7227] memfd_create("syzkaller", 0) = 3 [pid 7227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7227] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7227] munmap(0x7feef78ae000, 2097152) = 0 [pid 7227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7227] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7227] close(3) = 0 [pid 7227] mkdir("./file0", 0777) = 0 [pid 7227] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7227] chdir("./file0") = 0 [pid 7227] ioctl(4, LOOP_CLR_FD) = 0 [pid 7227] close(4) = 0 [pid 7227] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7226] <... futex resumed>) = 0 [pid 7227] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7226] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7226] <... futex resumed>) = 0 [pid 7227] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7226] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7227] <... openat resumed>) = 4 [pid 7227] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7226] <... futex resumed>) = 0 [pid 7227] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7226] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7226] <... futex resumed>) = 0 [pid 7227] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7226] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7227] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7227] <... futex resumed>) = 0 [pid 7227] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7226] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 234.562523][ T7227] loop0: detected capacity change from 0 to 4096 [ 234.583638][ T7227] ntfs: volume version 3.1. [pid 7226] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7226] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7226] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2186]}, 88) = 2186 [pid 7226] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7228 attached [pid 7228] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7228] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7226] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7228] ftruncate(4, 0 [pid 7226] <... futex resumed>) = 0 [pid 7226] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7228] <... ftruncate resumed>) = 0 [pid 7228] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7227] <... write resumed>) = 1048064 [pid 7226] <... futex resumed>) = 0 [pid 7228] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7227] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7226] close(3 [pid 7227] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7226] <... close resumed>) = 0 [pid 7226] close(4) = 0 [pid 7226] close(5) = 0 [pid 7226] close(6) = -1 EBADF (Bad file descriptor) [pid 7226] close(7) = -1 EBADF (Bad file descriptor) [pid 7226] close(8) = -1 EBADF (Bad file descriptor) [pid 7226] close(9) = -1 EBADF (Bad file descriptor) [pid 7226] close(10) = -1 EBADF (Bad file descriptor) [pid 7226] close(11) = -1 EBADF (Bad file descriptor) [pid 7226] close(12) = -1 EBADF (Bad file descriptor) [pid 7226] close(13) = -1 EBADF (Bad file descriptor) [pid 7226] close(14) = -1 EBADF (Bad file descriptor) [pid 7226] close(15) = -1 EBADF (Bad file descriptor) [pid 7226] close(16) = -1 EBADF (Bad file descriptor) [pid 7226] close(17) = -1 EBADF (Bad file descriptor) [pid 7226] close(18) = -1 EBADF (Bad file descriptor) [pid 7226] close(19) = -1 EBADF (Bad file descriptor) [pid 7226] close(20) = -1 EBADF (Bad file descriptor) [pid 7226] close(21) = -1 EBADF (Bad file descriptor) [pid 7226] close(22) = -1 EBADF (Bad file descriptor) [pid 7226] close(23) = -1 EBADF (Bad file descriptor) [pid 7226] close(24) = -1 EBADF (Bad file descriptor) [pid 7226] close(25) = -1 EBADF (Bad file descriptor) [pid 7226] close(26) = -1 EBADF (Bad file descriptor) [pid 7226] close(27) = -1 EBADF (Bad file descriptor) [pid 7226] close(28) = -1 EBADF (Bad file descriptor) [pid 7226] close(29) = -1 EBADF (Bad file descriptor) [pid 7226] exit_group(0 [pid 7227] <... futex resumed>) = ? [pid 7228] <... futex resumed>) = ? [pid 7226] <... exit_group resumed>) = ? [pid 7227] +++ exited with 0 +++ [pid 7228] +++ exited with 0 +++ [pid 7226] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2184, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./734", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./734", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./734/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./734/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./734/cgroup.cpu") = 0 [pid 5028] umount2("./734/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./734/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./734/binderfs") = 0 [pid 5028] umount2("./734/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./734/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./734/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./734/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./734/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./734/file0") = 0 [pid 5028] umount2("./734/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./734/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./734/cgroup") = 0 [pid 5028] umount2("./734/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./734/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./734/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./734") = 0 [pid 5028] mkdir("./735", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2187 ./strace-static-x86_64: Process 7229 attached [pid 7229] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7229] chdir("./735") = 0 [pid 7229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7229] setpgid(0, 0) = 0 [pid 7229] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7229] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7229] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7229] write(3, "1000", 4) = 4 [pid 7229] close(3) = 0 [pid 7229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7229] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7229] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7229] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7229] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7229] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7230 attached [pid 7230] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7229] <... clone3 resumed> => {parent_tid=[2188]}, 88) = 2188 [pid 7230] <... rseq resumed>) = 0 [pid 7229] rt_sigprocmask(SIG_SETMASK, [], [pid 7230] set_robust_list(0x7feeffcce9a0, 24 [pid 7229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7229] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7229] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7230] <... set_robust_list resumed>) = 0 [pid 7230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7230] memfd_create("syzkaller", 0) = 3 [pid 7230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7230] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7230] munmap(0x7feef78ae000, 2097152) = 0 [pid 7230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7230] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7230] close(3) = 0 [pid 7230] mkdir("./file0", 0777) = 0 [pid 7230] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7230] chdir("./file0") = 0 [pid 7230] ioctl(4, LOOP_CLR_FD) = 0 [pid 7230] close(4) = 0 [pid 7230] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7230] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7229] <... futex resumed>) = 0 [pid 7229] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7230] <... futex resumed>) = 0 [pid 7229] <... futex resumed>) = 1 [pid 7230] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7229] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7230] <... openat resumed>) = 4 [pid 7230] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7229] <... futex resumed>) = 0 [pid 7230] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7229] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7230] <... futex resumed>) = 0 [pid 7229] <... futex resumed>) = 1 [pid 7230] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7229] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7230] <... openat resumed>) = 5 [pid 7230] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7229] <... futex resumed>) = 0 [pid 7230] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7229] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7230] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7229] <... futex resumed>) = 0 [ 234.784566][ T7230] loop0: detected capacity change from 0 to 4096 [ 234.806375][ T7230] ntfs: volume version 3.1. [pid 7229] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7229] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7229] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7229] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7231 attached [pid 7231] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7229] <... clone3 resumed> => {parent_tid=[2189]}, 88) = 2189 [pid 7229] rt_sigprocmask(SIG_SETMASK, [], [pid 7231] <... rseq resumed>) = 0 [pid 7231] set_robust_list(0x7feef7aad9a0, 24 [pid 7229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7229] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7229] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7231] <... set_robust_list resumed>) = 0 [pid 7231] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7230] <... write resumed>) = 1048064 [pid 7231] ftruncate(4, 0 [pid 7230] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7230] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7231] <... ftruncate resumed>) = 0 [pid 7231] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7231] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7229] <... futex resumed>) = 0 [pid 7229] close(3) = 0 [pid 7229] close(4) = 0 [pid 7229] close(5) = 0 [pid 7229] close(6) = -1 EBADF (Bad file descriptor) [pid 7229] close(7) = -1 EBADF (Bad file descriptor) [pid 7229] close(8) = -1 EBADF (Bad file descriptor) [pid 7229] close(9) = -1 EBADF (Bad file descriptor) [pid 7229] close(10) = -1 EBADF (Bad file descriptor) [pid 7229] close(11) = -1 EBADF (Bad file descriptor) [pid 7229] close(12) = -1 EBADF (Bad file descriptor) [pid 7229] close(13) = -1 EBADF (Bad file descriptor) [pid 7229] close(14) = -1 EBADF (Bad file descriptor) [pid 7229] close(15) = -1 EBADF (Bad file descriptor) [pid 7229] close(16) = -1 EBADF (Bad file descriptor) [pid 7229] close(17) = -1 EBADF (Bad file descriptor) [pid 7229] close(18) = -1 EBADF (Bad file descriptor) [pid 7229] close(19) = -1 EBADF (Bad file descriptor) [pid 7229] close(20) = -1 EBADF (Bad file descriptor) [pid 7229] close(21) = -1 EBADF (Bad file descriptor) [pid 7229] close(22) = -1 EBADF (Bad file descriptor) [pid 7229] close(23) = -1 EBADF (Bad file descriptor) [pid 7229] close(24) = -1 EBADF (Bad file descriptor) [pid 7229] close(25) = -1 EBADF (Bad file descriptor) [pid 7229] close(26) = -1 EBADF (Bad file descriptor) [pid 7229] close(27) = -1 EBADF (Bad file descriptor) [pid 7229] close(28) = -1 EBADF (Bad file descriptor) [pid 7229] close(29) = -1 EBADF (Bad file descriptor) [pid 7229] exit_group(0) = ? [pid 7231] <... futex resumed>) = ? [pid 7230] <... futex resumed>) = ? [pid 7231] +++ exited with 0 +++ [pid 7230] +++ exited with 0 +++ [pid 7229] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2187, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./735", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./735", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./735/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./735/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./735/cgroup.cpu") = 0 [pid 5028] umount2("./735/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./735/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./735/binderfs") = 0 [pid 5028] umount2("./735/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./735/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./735/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./735/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./735/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./735/file0") = 0 [pid 5028] umount2("./735/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./735/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./735/cgroup") = 0 [pid 5028] umount2("./735/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./735/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./735/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./735") = 0 [pid 5028] mkdir("./736", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2190 ./strace-static-x86_64: Process 7232 attached [pid 7232] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7232] chdir("./736") = 0 [pid 7232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7232] setpgid(0, 0) = 0 [pid 7232] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7232] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7232] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7232] write(3, "1000", 4) = 4 [pid 7232] close(3) = 0 [pid 7232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7232] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7232] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7232] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7232] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7232] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7233 attached [pid 7233] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7232] <... clone3 resumed> => {parent_tid=[2191]}, 88) = 2191 [pid 7233] <... rseq resumed>) = 0 [pid 7233] set_robust_list(0x7feeffcce9a0, 24 [pid 7232] rt_sigprocmask(SIG_SETMASK, [], [pid 7233] <... set_robust_list resumed>) = 0 [pid 7232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7233] rt_sigprocmask(SIG_SETMASK, [], [pid 7232] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7232] <... futex resumed>) = 0 [pid 7232] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7233] memfd_create("syzkaller", 0) = 3 [pid 7233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7233] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7233] munmap(0x7feef78ae000, 2097152) = 0 [pid 7233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7233] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7233] close(3) = 0 [pid 7233] mkdir("./file0", 0777) = 0 [pid 7233] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7233] chdir("./file0") = 0 [pid 7233] ioctl(4, LOOP_CLR_FD) = 0 [pid 7233] close(4) = 0 [pid 7233] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7232] <... futex resumed>) = 0 [pid 7233] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7232] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7233] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7232] <... futex resumed>) = 0 [pid 7233] <... openat resumed>) = 4 [pid 7232] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7233] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7232] <... futex resumed>) = 0 [pid 7232] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7232] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7233] <... futex resumed>) = 1 [pid 7233] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7233] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7232] <... futex resumed>) = 0 [pid 7232] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7232] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 235.016721][ T7233] loop0: detected capacity change from 0 to 4096 [ 235.036497][ T7233] ntfs: volume version 3.1. [pid 7233] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7232] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7232] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7232] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7234 attached [pid 7234] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7232] <... clone3 resumed> => {parent_tid=[2192]}, 88) = 2192 [pid 7232] rt_sigprocmask(SIG_SETMASK, [], [pid 7234] set_robust_list(0x7feef7aad9a0, 24 [pid 7232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7234] <... set_robust_list resumed>) = 0 [pid 7232] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7234] rt_sigprocmask(SIG_SETMASK, [], [pid 7232] <... futex resumed>) = 0 [pid 7234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7234] ftruncate(4, 0 [pid 7232] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7234] <... ftruncate resumed>) = 0 [pid 7234] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7233] <... write resumed>) = 1048064 [pid 7234] <... futex resumed>) = 1 [pid 7233] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7234] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7233] <... futex resumed>) = 0 [pid 7232] <... futex resumed>) = 0 [pid 7233] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7232] close(3) = 0 [pid 7232] close(4) = 0 [pid 7232] close(5) = 0 [pid 7232] close(6) = -1 EBADF (Bad file descriptor) [pid 7232] close(7) = -1 EBADF (Bad file descriptor) [pid 7232] close(8) = -1 EBADF (Bad file descriptor) [pid 7232] close(9) = -1 EBADF (Bad file descriptor) [pid 7232] close(10) = -1 EBADF (Bad file descriptor) [pid 7232] close(11) = -1 EBADF (Bad file descriptor) [pid 7232] close(12) = -1 EBADF (Bad file descriptor) [pid 7232] close(13) = -1 EBADF (Bad file descriptor) [pid 7232] close(14) = -1 EBADF (Bad file descriptor) [pid 7232] close(15) = -1 EBADF (Bad file descriptor) [pid 7232] close(16) = -1 EBADF (Bad file descriptor) [pid 7232] close(17) = -1 EBADF (Bad file descriptor) [pid 7232] close(18) = -1 EBADF (Bad file descriptor) [pid 7232] close(19) = -1 EBADF (Bad file descriptor) [pid 7232] close(20) = -1 EBADF (Bad file descriptor) [pid 7232] close(21) = -1 EBADF (Bad file descriptor) [pid 7232] close(22) = -1 EBADF (Bad file descriptor) [pid 7232] close(23) = -1 EBADF (Bad file descriptor) [pid 7232] close(24) = -1 EBADF (Bad file descriptor) [pid 7232] close(25) = -1 EBADF (Bad file descriptor) [pid 7232] close(26) = -1 EBADF (Bad file descriptor) [pid 7232] close(27) = -1 EBADF (Bad file descriptor) [pid 7232] close(28) = -1 EBADF (Bad file descriptor) [pid 7232] close(29) = -1 EBADF (Bad file descriptor) [pid 7232] exit_group(0) = ? [pid 7233] <... futex resumed>) = ? [pid 7234] <... futex resumed>) = ? [pid 7233] +++ exited with 0 +++ [pid 7234] +++ exited with 0 +++ [pid 7232] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2190, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./736", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./736", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./736/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./736/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./736/cgroup.cpu") = 0 [pid 5028] umount2("./736/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./736/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./736/binderfs") = 0 [pid 5028] umount2("./736/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./736/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./736/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./736/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./736/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./736/file0") = 0 [pid 5028] umount2("./736/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./736/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./736/cgroup") = 0 [pid 5028] umount2("./736/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./736/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./736/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./736") = 0 [pid 5028] mkdir("./737", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7235 attached [pid 7235] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2193 [pid 7235] <... set_robust_list resumed>) = 0 [pid 7235] chdir("./737") = 0 [pid 7235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7235] setpgid(0, 0) = 0 [pid 7235] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7235] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7235] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7235] write(3, "1000", 4) = 4 [pid 7235] close(3) = 0 [pid 7235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7235] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7235] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7235] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7236 attached [pid 7236] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7235] <... clone3 resumed> => {parent_tid=[2194]}, 88) = 2194 [pid 7236] set_robust_list(0x7feeffcce9a0, 24 [pid 7235] rt_sigprocmask(SIG_SETMASK, [], [pid 7236] <... set_robust_list resumed>) = 0 [pid 7236] rt_sigprocmask(SIG_SETMASK, [], [pid 7235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7235] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] memfd_create("syzkaller", 0 [pid 7235] <... futex resumed>) = 0 [pid 7235] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7236] <... memfd_create resumed>) = 3 [pid 7236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7236] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7236] munmap(0x7feef78ae000, 2097152) = 0 [pid 7236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7236] close(3) = 0 [pid 7236] mkdir("./file0", 0777) = 0 [pid 7236] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7236] chdir("./file0") = 0 [pid 7236] ioctl(4, LOOP_CLR_FD) = 0 [pid 7236] close(4) = 0 [pid 7236] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7235] <... futex resumed>) = 0 [pid 7235] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7236] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7235] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7236] <... openat resumed>) = 4 [pid 7236] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7235] <... futex resumed>) = 0 [pid 7236] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7235] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7235] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7236] <... openat resumed>) = 5 [pid 7236] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7235] <... futex resumed>) = 0 [pid 7236] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7235] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7235] <... futex resumed>) = 0 [pid 7236] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 235.221555][ T7236] loop0: detected capacity change from 0 to 4096 [ 235.242644][ T7236] ntfs: volume version 3.1. [pid 7235] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7235] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7235] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7235] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2195]}, 88) = 2195 [pid 7235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7235] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7237 attached ) = 0 [pid 7237] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7235] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7237] <... rseq resumed>) = 0 [pid 7237] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7237] ftruncate(4, 0) = 0 [pid 7237] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7236] <... write resumed>) = 1048064 [pid 7237] <... futex resumed>) = 1 [pid 7236] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7235] <... futex resumed>) = 0 [pid 7237] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7235] close(3 [pid 7236] <... futex resumed>) = 0 [pid 7235] <... close resumed>) = 0 [pid 7236] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7235] close(4) = 0 [pid 7235] close(5) = 0 [pid 7235] close(6) = -1 EBADF (Bad file descriptor) [pid 7235] close(7) = -1 EBADF (Bad file descriptor) [pid 7235] close(8) = -1 EBADF (Bad file descriptor) [pid 7235] close(9) = -1 EBADF (Bad file descriptor) [pid 7235] close(10) = -1 EBADF (Bad file descriptor) [pid 7235] close(11) = -1 EBADF (Bad file descriptor) [pid 7235] close(12) = -1 EBADF (Bad file descriptor) [pid 7235] close(13) = -1 EBADF (Bad file descriptor) [pid 7235] close(14) = -1 EBADF (Bad file descriptor) [pid 7235] close(15) = -1 EBADF (Bad file descriptor) [pid 7235] close(16) = -1 EBADF (Bad file descriptor) [pid 7235] close(17) = -1 EBADF (Bad file descriptor) [pid 7235] close(18) = -1 EBADF (Bad file descriptor) [pid 7235] close(19) = -1 EBADF (Bad file descriptor) [pid 7235] close(20) = -1 EBADF (Bad file descriptor) [pid 7235] close(21) = -1 EBADF (Bad file descriptor) [pid 7235] close(22) = -1 EBADF (Bad file descriptor) [pid 7235] close(23) = -1 EBADF (Bad file descriptor) [pid 7235] close(24) = -1 EBADF (Bad file descriptor) [pid 7235] close(25) = -1 EBADF (Bad file descriptor) [pid 7235] close(26) = -1 EBADF (Bad file descriptor) [pid 7235] close(27) = -1 EBADF (Bad file descriptor) [pid 7235] close(28) = -1 EBADF (Bad file descriptor) [pid 7235] close(29) = -1 EBADF (Bad file descriptor) [pid 7235] exit_group(0) = ? [pid 7236] <... futex resumed>) = ? [pid 7237] <... futex resumed>) = ? [pid 7236] +++ exited with 0 +++ [pid 7237] +++ exited with 0 +++ [pid 7235] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2193, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./737", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./737", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./737/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./737/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./737/cgroup.cpu") = 0 [pid 5028] umount2("./737/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./737/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./737/binderfs") = 0 [pid 5028] umount2("./737/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./737/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./737/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./737/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./737/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./737/file0") = 0 [pid 5028] umount2("./737/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./737/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./737/cgroup") = 0 [pid 5028] umount2("./737/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./737/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./737/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./737") = 0 [pid 5028] mkdir("./738", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2196 ./strace-static-x86_64: Process 7238 attached [pid 7238] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7238] chdir("./738") = 0 [pid 7238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7238] setpgid(0, 0) = 0 [pid 7238] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7238] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7238] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7238] write(3, "1000", 4) = 4 [pid 7238] close(3) = 0 [pid 7238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7238] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7238] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7238] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7238] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7238] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7239 attached [pid 7239] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7238] <... clone3 resumed> => {parent_tid=[2197]}, 88) = 2197 [pid 7239] <... rseq resumed>) = 0 [pid 7238] rt_sigprocmask(SIG_SETMASK, [], [pid 7239] set_robust_list(0x7feeffcce9a0, 24 [pid 7238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7239] <... set_robust_list resumed>) = 0 [pid 7239] rt_sigprocmask(SIG_SETMASK, [], [pid 7238] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7239] memfd_create("syzkaller", 0 [pid 7238] <... futex resumed>) = 0 [pid 7239] <... memfd_create resumed>) = 3 [pid 7238] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7239] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7239] munmap(0x7feef78ae000, 2097152) = 0 [pid 7239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7239] close(3) = 0 [pid 7239] mkdir("./file0", 0777) = 0 [pid 7239] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7239] chdir("./file0") = 0 [pid 7239] ioctl(4, LOOP_CLR_FD) = 0 [pid 7239] close(4) = 0 [pid 7239] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7238] <... futex resumed>) = 0 [pid 7238] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] <... futex resumed>) = 1 [pid 7238] <... futex resumed>) = 0 [pid 7239] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7238] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7239] <... openat resumed>) = 4 [pid 7239] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7239] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7238] <... futex resumed>) = 0 [pid 7238] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7239] <... futex resumed>) = 0 [pid 7239] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7238] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7239] <... openat resumed>) = 5 [pid 7239] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7238] <... futex resumed>) = 0 [pid 7238] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7238] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7239] <... futex resumed>) = 1 [ 235.452139][ T7239] loop0: detected capacity change from 0 to 4096 [ 235.474473][ T7239] ntfs: volume version 3.1. [pid 7239] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7238] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7238] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7238] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7238] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7238] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7238] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2198]}, 88) = 2198 [pid 7238] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7240 attached [pid 7240] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7240] set_robust_list(0x7feef7aad9a0, 24 [pid 7238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7240] <... set_robust_list resumed>) = 0 [pid 7240] rt_sigprocmask(SIG_SETMASK, [], [pid 7238] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7238] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7240] ftruncate(4, 0) = 0 [pid 7240] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7239] <... write resumed>) = 1048064 [pid 7240] <... futex resumed>) = 1 [pid 7239] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7240] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7239] <... futex resumed>) = 0 [pid 7238] <... futex resumed>) = 0 [pid 7239] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7238] close(3) = 0 [pid 7238] close(4) = 0 [pid 7238] close(5) = 0 [pid 7238] close(6) = -1 EBADF (Bad file descriptor) [pid 7238] close(7) = -1 EBADF (Bad file descriptor) [pid 7238] close(8) = -1 EBADF (Bad file descriptor) [pid 7238] close(9) = -1 EBADF (Bad file descriptor) [pid 7238] close(10) = -1 EBADF (Bad file descriptor) [pid 7238] close(11) = -1 EBADF (Bad file descriptor) [pid 7238] close(12) = -1 EBADF (Bad file descriptor) [pid 7238] close(13) = -1 EBADF (Bad file descriptor) [pid 7238] close(14) = -1 EBADF (Bad file descriptor) [pid 7238] close(15) = -1 EBADF (Bad file descriptor) [pid 7238] close(16) = -1 EBADF (Bad file descriptor) [pid 7238] close(17) = -1 EBADF (Bad file descriptor) [pid 7238] close(18) = -1 EBADF (Bad file descriptor) [pid 7238] close(19) = -1 EBADF (Bad file descriptor) [pid 7238] close(20) = -1 EBADF (Bad file descriptor) [pid 7238] close(21) = -1 EBADF (Bad file descriptor) [pid 7238] close(22) = -1 EBADF (Bad file descriptor) [pid 7238] close(23) = -1 EBADF (Bad file descriptor) [pid 7238] close(24) = -1 EBADF (Bad file descriptor) [pid 7238] close(25) = -1 EBADF (Bad file descriptor) [pid 7238] close(26) = -1 EBADF (Bad file descriptor) [pid 7238] close(27) = -1 EBADF (Bad file descriptor) [pid 7238] close(28) = -1 EBADF (Bad file descriptor) [pid 7238] close(29) = -1 EBADF (Bad file descriptor) [pid 7238] exit_group(0) = ? [pid 7240] <... futex resumed>) = ? [pid 7239] <... futex resumed>) = ? [pid 7240] +++ exited with 0 +++ [pid 7239] +++ exited with 0 +++ [pid 7238] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2196, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./738", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./738", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./738/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./738/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./738/cgroup.cpu") = 0 [pid 5028] umount2("./738/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./738/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./738/binderfs") = 0 [pid 5028] umount2("./738/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./738/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./738/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./738/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./738/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./738/file0") = 0 [pid 5028] umount2("./738/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./738/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./738/cgroup") = 0 [pid 5028] umount2("./738/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./738/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./738/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./738") = 0 [pid 5028] mkdir("./739", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7241 attached , child_tidptr=0x5555563a5690) = 2199 [pid 7241] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7241] chdir("./739") = 0 [pid 7241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7241] setpgid(0, 0) = 0 [pid 7241] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7241] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7241] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7241] write(3, "1000", 4) = 4 [pid 7241] close(3) = 0 [pid 7241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7241] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7241] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7241] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7241] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7241] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2200]}, 88) = 2200 ./strace-static-x86_64: Process 7242 attached [pid 7241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7241] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7242] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7242] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7241] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7242] memfd_create("syzkaller", 0) = 3 [pid 7242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7242] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7242] munmap(0x7feef78ae000, 2097152) = 0 [pid 7242] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7242] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7242] close(3) = 0 [pid 7242] mkdir("./file0", 0777) = 0 [pid 7242] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7242] chdir("./file0") = 0 [pid 7242] ioctl(4, LOOP_CLR_FD) = 0 [pid 7242] close(4) = 0 [pid 7242] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7242] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7241] <... futex resumed>) = 0 [pid 7241] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7242] <... futex resumed>) = 0 [pid 7241] <... futex resumed>) = 1 [pid 7242] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7241] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7242] <... openat resumed>) = 4 [pid 7242] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] <... futex resumed>) = 0 [pid 7242] <... futex resumed>) = 1 [pid 7241] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7242] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7241] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7242] <... openat resumed>) = 5 [pid 7242] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7241] <... futex resumed>) = 0 [pid 7242] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7241] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 235.679748][ T7242] loop0: detected capacity change from 0 to 4096 [ 235.699873][ T7242] ntfs: volume version 3.1. [pid 7241] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7241] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7241] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7241] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2201]}, 88) = 2201 [pid 7241] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7243 attached NULL, 8) = 0 [pid 7241] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7243] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7241] <... futex resumed>) = 0 [pid 7243] <... rseq resumed>) = 0 [pid 7241] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7243] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7243] ftruncate(4, 0) = 0 [pid 7243] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7242] <... write resumed>) = 1048064 [pid 7243] <... futex resumed>) = 1 [pid 7242] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7241] <... futex resumed>) = 0 [pid 7243] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7242] <... futex resumed>) = 0 [pid 7241] close(3 [pid 7242] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7241] <... close resumed>) = 0 [pid 7241] close(4) = 0 [pid 7241] close(5) = 0 [pid 7241] close(6) = -1 EBADF (Bad file descriptor) [pid 7241] close(7) = -1 EBADF (Bad file descriptor) [pid 7241] close(8) = -1 EBADF (Bad file descriptor) [pid 7241] close(9) = -1 EBADF (Bad file descriptor) [pid 7241] close(10) = -1 EBADF (Bad file descriptor) [pid 7241] close(11) = -1 EBADF (Bad file descriptor) [pid 7241] close(12) = -1 EBADF (Bad file descriptor) [pid 7241] close(13) = -1 EBADF (Bad file descriptor) [pid 7241] close(14) = -1 EBADF (Bad file descriptor) [pid 7241] close(15) = -1 EBADF (Bad file descriptor) [pid 7241] close(16) = -1 EBADF (Bad file descriptor) [pid 7241] close(17) = -1 EBADF (Bad file descriptor) [pid 7241] close(18) = -1 EBADF (Bad file descriptor) [pid 7241] close(19) = -1 EBADF (Bad file descriptor) [pid 7241] close(20) = -1 EBADF (Bad file descriptor) [pid 7241] close(21) = -1 EBADF (Bad file descriptor) [pid 7241] close(22) = -1 EBADF (Bad file descriptor) [pid 7241] close(23) = -1 EBADF (Bad file descriptor) [pid 7241] close(24) = -1 EBADF (Bad file descriptor) [pid 7241] close(25) = -1 EBADF (Bad file descriptor) [pid 7241] close(26) = -1 EBADF (Bad file descriptor) [pid 7241] close(27) = -1 EBADF (Bad file descriptor) [pid 7241] close(28) = -1 EBADF (Bad file descriptor) [pid 7241] close(29) = -1 EBADF (Bad file descriptor) [pid 7241] exit_group(0) = ? [pid 7242] <... futex resumed>) = ? [pid 7243] <... futex resumed>) = ? [pid 7242] +++ exited with 0 +++ [pid 7243] +++ exited with 0 +++ [pid 7241] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2199, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./739", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./739", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./739/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./739/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./739/cgroup.cpu") = 0 [pid 5028] umount2("./739/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./739/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./739/binderfs") = 0 [pid 5028] umount2("./739/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./739/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./739/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./739/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./739/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./739/file0") = 0 [pid 5028] umount2("./739/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./739/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./739/cgroup") = 0 [pid 5028] umount2("./739/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./739/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./739/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./739") = 0 [pid 5028] mkdir("./740", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7244 attached , child_tidptr=0x5555563a5690) = 2202 [pid 7244] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7244] chdir("./740") = 0 [pid 7244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7244] setpgid(0, 0) = 0 [pid 7244] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7244] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7244] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7244] write(3, "1000", 4) = 4 [pid 7244] close(3) = 0 [pid 7244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7244] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7244] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7244] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7244] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7245 attached [pid 7245] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7244] <... clone3 resumed> => {parent_tid=[2203]}, 88) = 2203 [pid 7245] set_robust_list(0x7feeffcce9a0, 24 [pid 7244] rt_sigprocmask(SIG_SETMASK, [], [pid 7245] <... set_robust_list resumed>) = 0 [pid 7245] rt_sigprocmask(SIG_SETMASK, [], [pid 7244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7244] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7244] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7245] memfd_create("syzkaller", 0) = 3 [pid 7245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7245] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7245] munmap(0x7feef78ae000, 2097152) = 0 [pid 7245] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7245] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7245] close(3) = 0 [pid 7245] mkdir("./file0", 0777) = 0 [pid 7245] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7245] chdir("./file0") = 0 [pid 7245] ioctl(4, LOOP_CLR_FD) = 0 [pid 7245] close(4) = 0 [pid 7245] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7245] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7244] <... futex resumed>) = 0 [pid 7244] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7245] <... futex resumed>) = 0 [pid 7245] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7244] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7245] <... openat resumed>) = 4 [pid 7245] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7244] <... futex resumed>) = 0 [pid 7245] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7244] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7244] <... futex resumed>) = 0 [pid 7245] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7244] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7245] <... openat resumed>) = 5 [pid 7245] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7244] <... futex resumed>) = 0 [pid 7244] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7245] <... futex resumed>) = 1 [pid 7244] <... futex resumed>) = 0 [pid 7245] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 235.895928][ T7245] loop0: detected capacity change from 0 to 4096 [ 235.914856][ T7245] ntfs: volume version 3.1. [pid 7244] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7244] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7244] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7246 attached [pid 7246] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7244] <... clone3 resumed> => {parent_tid=[2204]}, 88) = 2204 [pid 7246] <... rseq resumed>) = 0 [pid 7244] rt_sigprocmask(SIG_SETMASK, [], [pid 7246] set_robust_list(0x7feef7aad9a0, 24 [pid 7244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7246] <... set_robust_list resumed>) = 0 [pid 7246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7246] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7244] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7246] ftruncate(4, 0 [pid 7244] <... futex resumed>) = 0 [pid 7244] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7246] <... ftruncate resumed>) = 0 [pid 7246] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7245] <... write resumed>) = 1048064 [pid 7246] <... futex resumed>) = 1 [pid 7244] <... futex resumed>) = 0 [pid 7246] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7245] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7245] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7244] close(3) = 0 [pid 7244] close(4) = 0 [pid 7244] close(5) = 0 [pid 7244] close(6) = -1 EBADF (Bad file descriptor) [pid 7244] close(7) = -1 EBADF (Bad file descriptor) [pid 7244] close(8) = -1 EBADF (Bad file descriptor) [pid 7244] close(9) = -1 EBADF (Bad file descriptor) [pid 7244] close(10) = -1 EBADF (Bad file descriptor) [pid 7244] close(11) = -1 EBADF (Bad file descriptor) [pid 7244] close(12) = -1 EBADF (Bad file descriptor) [pid 7244] close(13) = -1 EBADF (Bad file descriptor) [pid 7244] close(14) = -1 EBADF (Bad file descriptor) [pid 7244] close(15) = -1 EBADF (Bad file descriptor) [pid 7244] close(16) = -1 EBADF (Bad file descriptor) [pid 7244] close(17) = -1 EBADF (Bad file descriptor) [pid 7244] close(18) = -1 EBADF (Bad file descriptor) [pid 7244] close(19) = -1 EBADF (Bad file descriptor) [pid 7244] close(20) = -1 EBADF (Bad file descriptor) [pid 7244] close(21) = -1 EBADF (Bad file descriptor) [pid 7244] close(22) = -1 EBADF (Bad file descriptor) [pid 7244] close(23) = -1 EBADF (Bad file descriptor) [pid 7244] close(24) = -1 EBADF (Bad file descriptor) [pid 7244] close(25) = -1 EBADF (Bad file descriptor) [pid 7244] close(26) = -1 EBADF (Bad file descriptor) [pid 7244] close(27) = -1 EBADF (Bad file descriptor) [pid 7244] close(28) = -1 EBADF (Bad file descriptor) [pid 7244] close(29) = -1 EBADF (Bad file descriptor) [pid 7244] exit_group(0 [pid 7246] <... futex resumed>) = ? [pid 7246] +++ exited with 0 +++ [pid 7244] <... exit_group resumed>) = ? [pid 7245] <... futex resumed>) = ? [pid 7245] +++ exited with 0 +++ [pid 7244] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2202, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./740", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./740", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./740/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./740/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./740/cgroup.cpu") = 0 [pid 5028] umount2("./740/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./740/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./740/binderfs") = 0 [pid 5028] umount2("./740/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./740/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./740/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./740/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./740/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./740/file0") = 0 [pid 5028] umount2("./740/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./740/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./740/cgroup") = 0 [pid 5028] umount2("./740/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./740/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./740/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./740") = 0 [pid 5028] mkdir("./741", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7247 attached , child_tidptr=0x5555563a5690) = 2205 [pid 7247] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7247] chdir("./741") = 0 [pid 7247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7247] setpgid(0, 0) = 0 [pid 7247] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7247] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7247] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7247] write(3, "1000", 4) = 4 [pid 7247] close(3) = 0 [pid 7247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7247] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7247] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7247] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7247] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7248 attached => {parent_tid=[2206]}, 88) = 2206 [pid 7247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7247] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7248] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7248] set_robust_list(0x7feeffcce9a0, 24 [pid 7247] <... futex resumed>) = 0 [pid 7247] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7248] <... set_robust_list resumed>) = 0 [pid 7248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7248] memfd_create("syzkaller", 0) = 3 [pid 7248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7248] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7248] munmap(0x7feef78ae000, 2097152) = 0 [pid 7248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7248] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7248] close(3) = 0 [pid 7248] mkdir("./file0", 0777) = 0 [pid 7248] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7248] chdir("./file0") = 0 [pid 7248] ioctl(4, LOOP_CLR_FD) = 0 [pid 7248] close(4) = 0 [pid 7248] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7248] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7247] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7247] <... futex resumed>) = 0 [pid 7248] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7247] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7248] <... openat resumed>) = 4 [pid 7248] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7248] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7247] <... futex resumed>) = 0 [pid 7247] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7248] <... futex resumed>) = 0 [pid 7248] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7247] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7248] <... openat resumed>) = 5 [pid 7248] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7247] <... futex resumed>) = 0 [pid 7247] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7248] <... futex resumed>) = 1 [pid 7247] <... futex resumed>) = 0 [pid 7247] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 236.117341][ T7248] loop0: detected capacity change from 0 to 4096 [ 236.137342][ T7248] ntfs: volume version 3.1. [pid 7248] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7247] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7247] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7247] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7247] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7249 attached => {parent_tid=[2207]}, 88) = 2207 [pid 7247] rt_sigprocmask(SIG_SETMASK, [], [pid 7249] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7249] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7247] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7247] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7249] ftruncate(4, 0) = 0 [pid 7249] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7248] <... write resumed>) = 1048064 [pid 7247] <... futex resumed>) = 0 [pid 7249] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7248] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7248] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7247] close(3) = 0 [pid 7247] close(4) = 0 [pid 7247] close(5) = 0 [pid 7247] close(6) = -1 EBADF (Bad file descriptor) [pid 7247] close(7) = -1 EBADF (Bad file descriptor) [pid 7247] close(8) = -1 EBADF (Bad file descriptor) [pid 7247] close(9) = -1 EBADF (Bad file descriptor) [pid 7247] close(10) = -1 EBADF (Bad file descriptor) [pid 7247] close(11) = -1 EBADF (Bad file descriptor) [pid 7247] close(12) = -1 EBADF (Bad file descriptor) [pid 7247] close(13) = -1 EBADF (Bad file descriptor) [pid 7247] close(14) = -1 EBADF (Bad file descriptor) [pid 7247] close(15) = -1 EBADF (Bad file descriptor) [pid 7247] close(16) = -1 EBADF (Bad file descriptor) [pid 7247] close(17) = -1 EBADF (Bad file descriptor) [pid 7247] close(18) = -1 EBADF (Bad file descriptor) [pid 7247] close(19) = -1 EBADF (Bad file descriptor) [pid 7247] close(20) = -1 EBADF (Bad file descriptor) [pid 7247] close(21) = -1 EBADF (Bad file descriptor) [pid 7247] close(22) = -1 EBADF (Bad file descriptor) [pid 7247] close(23) = -1 EBADF (Bad file descriptor) [pid 7247] close(24) = -1 EBADF (Bad file descriptor) [pid 7247] close(25) = -1 EBADF (Bad file descriptor) [pid 7247] close(26) = -1 EBADF (Bad file descriptor) [pid 7247] close(27) = -1 EBADF (Bad file descriptor) [pid 7247] close(28) = -1 EBADF (Bad file descriptor) [pid 7247] close(29) = -1 EBADF (Bad file descriptor) [pid 7247] exit_group(0) = ? [pid 7249] <... futex resumed>) = ? [pid 7248] <... futex resumed>) = ? [pid 7249] +++ exited with 0 +++ [pid 7248] +++ exited with 0 +++ [pid 7247] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2205, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./741", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./741", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./741/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./741/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./741/cgroup.cpu") = 0 [pid 5028] umount2("./741/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./741/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./741/binderfs") = 0 [pid 5028] umount2("./741/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./741/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./741/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./741/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./741/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./741/file0") = 0 [pid 5028] umount2("./741/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./741/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./741/cgroup") = 0 [pid 5028] umount2("./741/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./741/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./741/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./741") = 0 [pid 5028] mkdir("./742", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7250 attached , child_tidptr=0x5555563a5690) = 2208 [pid 7250] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7250] chdir("./742") = 0 [pid 7250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7250] setpgid(0, 0) = 0 [pid 7250] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7250] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7250] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7250] write(3, "1000", 4) = 4 [pid 7250] close(3) = 0 [pid 7250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7250] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7250] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7250] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7250] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7251 attached => {parent_tid=[2209]}, 88) = 2209 [pid 7250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7250] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7250] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7251] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7251] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7251] memfd_create("syzkaller", 0) = 3 [pid 7251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7251] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7251] munmap(0x7feef78ae000, 2097152) = 0 [pid 7251] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7251] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7251] close(3) = 0 [pid 7251] mkdir("./file0", 0777) = 0 [pid 7251] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7251] chdir("./file0") = 0 [pid 7251] ioctl(4, LOOP_CLR_FD) = 0 [pid 7251] close(4) = 0 [pid 7251] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7250] <... futex resumed>) = 0 [pid 7251] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7250] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7250] <... futex resumed>) = 0 [pid 7250] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7251] <... openat resumed>) = 4 [pid 7251] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7251] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7250] <... futex resumed>) = 0 [pid 7250] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7251] <... futex resumed>) = 0 [pid 7251] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7250] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7251] <... openat resumed>) = 5 [pid 7251] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7250] <... futex resumed>) = 0 [pid 7251] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7250] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 236.320285][ T7251] loop0: detected capacity change from 0 to 4096 [ 236.342271][ T7251] ntfs: volume version 3.1. [pid 7250] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7250] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7250] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7252 attached [pid 7252] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7250] <... clone3 resumed> => {parent_tid=[2210]}, 88) = 2210 [pid 7252] <... rseq resumed>) = 0 [pid 7250] rt_sigprocmask(SIG_SETMASK, [], [pid 7252] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7252] rt_sigprocmask(SIG_SETMASK, [], [pid 7250] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7250] <... futex resumed>) = 0 [pid 7252] ftruncate(4, 0 [pid 7250] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7252] <... ftruncate resumed>) = 0 [pid 7252] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7251] <... write resumed>) = 1048064 [pid 7252] <... futex resumed>) = 1 [pid 7251] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7252] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7251] <... futex resumed>) = 0 [pid 7250] <... futex resumed>) = 0 [pid 7251] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7250] close(3) = 0 [pid 7250] close(4) = 0 [pid 7250] close(5) = 0 [pid 7250] close(6) = -1 EBADF (Bad file descriptor) [pid 7250] close(7) = -1 EBADF (Bad file descriptor) [pid 7250] close(8) = -1 EBADF (Bad file descriptor) [pid 7250] close(9) = -1 EBADF (Bad file descriptor) [pid 7250] close(10) = -1 EBADF (Bad file descriptor) [pid 7250] close(11) = -1 EBADF (Bad file descriptor) [pid 7250] close(12) = -1 EBADF (Bad file descriptor) [pid 7250] close(13) = -1 EBADF (Bad file descriptor) [pid 7250] close(14) = -1 EBADF (Bad file descriptor) [pid 7250] close(15) = -1 EBADF (Bad file descriptor) [pid 7250] close(16) = -1 EBADF (Bad file descriptor) [pid 7250] close(17) = -1 EBADF (Bad file descriptor) [pid 7250] close(18) = -1 EBADF (Bad file descriptor) [pid 7250] close(19) = -1 EBADF (Bad file descriptor) [pid 7250] close(20) = -1 EBADF (Bad file descriptor) [pid 7250] close(21) = -1 EBADF (Bad file descriptor) [pid 7250] close(22) = -1 EBADF (Bad file descriptor) [pid 7250] close(23) = -1 EBADF (Bad file descriptor) [pid 7250] close(24) = -1 EBADF (Bad file descriptor) [pid 7250] close(25) = -1 EBADF (Bad file descriptor) [pid 7250] close(26) = -1 EBADF (Bad file descriptor) [pid 7250] close(27) = -1 EBADF (Bad file descriptor) [pid 7250] close(28) = -1 EBADF (Bad file descriptor) [pid 7250] close(29) = -1 EBADF (Bad file descriptor) [pid 7250] exit_group(0 [pid 7252] <... futex resumed>) = ? [pid 7252] +++ exited with 0 +++ [pid 7251] <... futex resumed>) = ? [pid 7250] <... exit_group resumed>) = ? [pid 7251] +++ exited with 0 +++ [pid 7250] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2208, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./742", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./742", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./742/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./742/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./742/cgroup.cpu") = 0 [pid 5028] umount2("./742/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./742/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./742/binderfs") = 0 [pid 5028] umount2("./742/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./742/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./742/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./742/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./742/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./742/file0") = 0 [pid 5028] umount2("./742/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./742/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./742/cgroup") = 0 [pid 5028] umount2("./742/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./742/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./742/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./742") = 0 [pid 5028] mkdir("./743", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7253 attached , child_tidptr=0x5555563a5690) = 2211 [pid 7253] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7253] chdir("./743") = 0 [pid 7253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7253] setpgid(0, 0) = 0 [pid 7253] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7253] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7253] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7253] write(3, "1000", 4) = 4 [pid 7253] close(3) = 0 [pid 7253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7253] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7253] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7253] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7253] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7253] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7254 attached => {parent_tid=[2212]}, 88) = 2212 [pid 7253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7254] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7253] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7253] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7254] <... rseq resumed>) = 0 [pid 7254] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7254] memfd_create("syzkaller", 0) = 3 [pid 7254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7254] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7254] munmap(0x7feef78ae000, 2097152) = 0 [pid 7254] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7254] close(3) = 0 [pid 7254] mkdir("./file0", 0777) = 0 [ 236.547504][ T7254] loop0: detected capacity change from 0 to 4096 [ 236.556761][ T7254] __ntfs_warning: 12 callbacks suppressed [ 236.556776][ T7254] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7254] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7254] chdir("./file0") = 0 [pid 7254] ioctl(4, LOOP_CLR_FD) = 0 [pid 7254] close(4) = 0 [pid 7254] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7254] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7253] <... futex resumed>) = 0 [pid 7253] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7254] <... futex resumed>) = 0 [pid 7253] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7254] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7254] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7253] <... futex resumed>) = 0 [pid 7253] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7254] <... futex resumed>) = 1 [pid 7253] <... futex resumed>) = 0 [pid 7254] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7253] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7254] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7254] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7253] <... futex resumed>) = 0 [pid 7253] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7254] <... futex resumed>) = 0 [pid 7253] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 236.593794][ T7254] ntfs: volume version 3.1. [pid 7254] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7253] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7253] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7253] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7253] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7255 attached [pid 7255] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7253] <... clone3 resumed> => {parent_tid=[2213]}, 88) = 2213 [pid 7255] <... rseq resumed>) = 0 [pid 7253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7255] set_robust_list(0x7feef7aad9a0, 24 [pid 7253] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7255] <... set_robust_list resumed>) = 0 [pid 7253] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7255] ftruncate(4, 0) = 0 [pid 7254] <... write resumed>) = 1048064 [pid 7255] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7254] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7255] <... futex resumed>) = 1 [pid 7254] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7253] <... futex resumed>) = 0 [pid 7255] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7253] close(3) = 0 [pid 7253] close(4) = 0 [pid 7253] close(5) = 0 [pid 7253] close(6) = -1 EBADF (Bad file descriptor) [pid 7253] close(7) = -1 EBADF (Bad file descriptor) [pid 7253] close(8) = -1 EBADF (Bad file descriptor) [pid 7253] close(9) = -1 EBADF (Bad file descriptor) [pid 7253] close(10) = -1 EBADF (Bad file descriptor) [pid 7253] close(11) = -1 EBADF (Bad file descriptor) [pid 7253] close(12) = -1 EBADF (Bad file descriptor) [pid 7253] close(13) = -1 EBADF (Bad file descriptor) [pid 7253] close(14) = -1 EBADF (Bad file descriptor) [pid 7253] close(15) = -1 EBADF (Bad file descriptor) [pid 7253] close(16) = -1 EBADF (Bad file descriptor) [pid 7253] close(17) = -1 EBADF (Bad file descriptor) [pid 7253] close(18) = -1 EBADF (Bad file descriptor) [pid 7253] close(19) = -1 EBADF (Bad file descriptor) [pid 7253] close(20) = -1 EBADF (Bad file descriptor) [pid 7253] close(21) = -1 EBADF (Bad file descriptor) [pid 7253] close(22) = -1 EBADF (Bad file descriptor) [pid 7253] close(23) = -1 EBADF (Bad file descriptor) [pid 7253] close(24) = -1 EBADF (Bad file descriptor) [pid 7253] close(25) = -1 EBADF (Bad file descriptor) [pid 7253] close(26) = -1 EBADF (Bad file descriptor) [pid 7253] close(27) = -1 EBADF (Bad file descriptor) [pid 7253] close(28) = -1 EBADF (Bad file descriptor) [pid 7253] close(29) = -1 EBADF (Bad file descriptor) [pid 7253] exit_group(0) = ? [pid 7254] <... futex resumed>) = ? [pid 7254] +++ exited with 0 +++ [pid 7255] <... futex resumed>) = ? [pid 7255] +++ exited with 0 +++ [pid 7253] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2211, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./743", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./743", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./743/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./743/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./743/cgroup.cpu") = 0 [pid 5028] umount2("./743/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./743/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./743/binderfs") = 0 [pid 5028] umount2("./743/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./743/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./743/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./743/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./743/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./743/file0") = 0 [pid 5028] umount2("./743/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./743/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./743/cgroup") = 0 [pid 5028] umount2("./743/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./743/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./743/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./743") = 0 [pid 5028] mkdir("./744", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2214 ./strace-static-x86_64: Process 7256 attached [pid 7256] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7256] chdir("./744") = 0 [pid 7256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7256] setpgid(0, 0) = 0 [pid 7256] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7256] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7256] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7256] write(3, "1000", 4) = 4 [pid 7256] close(3) = 0 [pid 7256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7256] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7256] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7256] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7256] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7256] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7257 attached => {parent_tid=[2215]}, 88) = 2215 [pid 7256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7256] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7256] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7257] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7257] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7257] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7257] memfd_create("syzkaller", 0) = 3 [pid 7257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7257] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7257] munmap(0x7feef78ae000, 2097152) = 0 [pid 7257] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7257] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7257] close(3) = 0 [pid 7257] mkdir("./file0", 0777) = 0 [pid 7257] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7257] chdir("./file0") = 0 [pid 7257] ioctl(4, LOOP_CLR_FD) = 0 [pid 7257] close(4) = 0 [pid 7257] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7257] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7256] <... futex resumed>) = 0 [pid 7256] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7257] <... futex resumed>) = 0 [pid 7256] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7257] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7257] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7257] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7256] <... futex resumed>) = 0 [pid 7256] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] <... futex resumed>) = 0 [pid 7257] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7256] <... futex resumed>) = 1 [pid 7257] <... openat resumed>) = 5 [pid 7257] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7256] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7257] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7256] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] <... futex resumed>) = 0 [pid 7256] <... futex resumed>) = 1 [pid 7257] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 236.790117][ T7257] loop0: detected capacity change from 0 to 4096 [ 236.799385][ T7257] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 236.834426][ T7257] ntfs: volume version 3.1. [pid 7256] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7256] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7256] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7256] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7258 attached => {parent_tid=[2216]}, 88) = 2216 [pid 7258] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7256] rt_sigprocmask(SIG_SETMASK, [], [pid 7258] set_robust_list(0x7feef7aad9a0, 24 [pid 7256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7258] <... set_robust_list resumed>) = 0 [pid 7256] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] rt_sigprocmask(SIG_SETMASK, [], [pid 7256] <... futex resumed>) = 0 [pid 7258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7256] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7258] ftruncate(4, 0) = 0 [pid 7258] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7257] <... write resumed>) = 1048064 [pid 7258] <... futex resumed>) = 1 [pid 7257] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7258] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7257] <... futex resumed>) = 0 [pid 7257] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7256] <... futex resumed>) = 0 [pid 7256] close(3) = 0 [pid 7256] close(4) = 0 [pid 7256] close(5) = 0 [pid 7256] close(6) = -1 EBADF (Bad file descriptor) [pid 7256] close(7) = -1 EBADF (Bad file descriptor) [pid 7256] close(8) = -1 EBADF (Bad file descriptor) [pid 7256] close(9) = -1 EBADF (Bad file descriptor) [pid 7256] close(10) = -1 EBADF (Bad file descriptor) [pid 7256] close(11) = -1 EBADF (Bad file descriptor) [pid 7256] close(12) = -1 EBADF (Bad file descriptor) [pid 7256] close(13) = -1 EBADF (Bad file descriptor) [pid 7256] close(14) = -1 EBADF (Bad file descriptor) [pid 7256] close(15) = -1 EBADF (Bad file descriptor) [pid 7256] close(16) = -1 EBADF (Bad file descriptor) [pid 7256] close(17) = -1 EBADF (Bad file descriptor) [pid 7256] close(18) = -1 EBADF (Bad file descriptor) [pid 7256] close(19) = -1 EBADF (Bad file descriptor) [pid 7256] close(20) = -1 EBADF (Bad file descriptor) [pid 7256] close(21) = -1 EBADF (Bad file descriptor) [pid 7256] close(22) = -1 EBADF (Bad file descriptor) [pid 7256] close(23) = -1 EBADF (Bad file descriptor) [pid 7256] close(24) = -1 EBADF (Bad file descriptor) [pid 7256] close(25) = -1 EBADF (Bad file descriptor) [pid 7256] close(26) = -1 EBADF (Bad file descriptor) [pid 7256] close(27) = -1 EBADF (Bad file descriptor) [pid 7256] close(28) = -1 EBADF (Bad file descriptor) [pid 7256] close(29) = -1 EBADF (Bad file descriptor) [pid 7256] exit_group(0) = ? [pid 7257] <... futex resumed>) = ? [pid 7258] <... futex resumed>) = ? [pid 7257] +++ exited with 0 +++ [pid 7258] +++ exited with 0 +++ [pid 7256] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2214, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./744", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./744", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./744/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./744/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./744/cgroup.cpu") = 0 [pid 5028] umount2("./744/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./744/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./744/binderfs") = 0 [pid 5028] umount2("./744/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./744/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./744/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./744/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./744/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./744/file0") = 0 [pid 5028] umount2("./744/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./744/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./744/cgroup") = 0 [pid 5028] umount2("./744/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./744/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./744/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./744") = 0 [pid 5028] mkdir("./745", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7259 attached , child_tidptr=0x5555563a5690) = 2217 [pid 7259] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7259] chdir("./745") = 0 [pid 7259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7259] setpgid(0, 0) = 0 [pid 7259] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7259] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7259] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7259] write(3, "1000", 4) = 4 [pid 7259] close(3) = 0 [pid 7259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7259] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7259] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7259] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7259] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7260 attached => {parent_tid=[2218]}, 88) = 2218 [pid 7260] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7259] rt_sigprocmask(SIG_SETMASK, [], [pid 7260] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7259] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7260] memfd_create("syzkaller", 0 [pid 7259] <... futex resumed>) = 0 [pid 7259] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7260] <... memfd_create resumed>) = 3 [pid 7260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7260] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7260] munmap(0x7feef78ae000, 2097152) = 0 [pid 7260] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7260] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7260] close(3) = 0 [pid 7260] mkdir("./file0", 0777) = 0 [pid 7260] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7260] chdir("./file0") = 0 [pid 7260] ioctl(4, LOOP_CLR_FD) = 0 [pid 7260] close(4) = 0 [pid 7260] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] <... futex resumed>) = 0 [pid 7259] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7260] <... futex resumed>) = 1 [pid 7259] <... futex resumed>) = 0 [pid 7260] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7259] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7260] <... openat resumed>) = 4 [pid 7260] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7259] <... futex resumed>) = 0 [pid 7260] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7259] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7259] <... futex resumed>) = 0 [pid 7260] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7259] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7260] <... openat resumed>) = 5 [pid 7260] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7259] <... futex resumed>) = 0 [pid 7260] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7259] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 237.030821][ T7260] loop0: detected capacity change from 0 to 4096 [ 237.040055][ T7260] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 237.073298][ T7260] ntfs: volume version 3.1. [pid 7259] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7259] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7259] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7261 attached [pid 7261] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7259] <... clone3 resumed> => {parent_tid=[2219]}, 88) = 2219 [pid 7261] <... rseq resumed>) = 0 [pid 7259] rt_sigprocmask(SIG_SETMASK, [], [pid 7261] set_robust_list(0x7feef7aad9a0, 24 [pid 7259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7261] <... set_robust_list resumed>) = 0 [pid 7259] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7261] rt_sigprocmask(SIG_SETMASK, [], [pid 7259] <... futex resumed>) = 0 [pid 7261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7259] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7261] ftruncate(4, 0) = 0 [pid 7261] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7259] <... futex resumed>) = 0 [pid 7260] <... write resumed>) = 1048064 [pid 7261] <... futex resumed>) = 1 [pid 7261] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7260] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7260] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7259] close(3) = 0 [pid 7259] close(4) = 0 [pid 7259] close(5) = 0 [pid 7259] close(6) = -1 EBADF (Bad file descriptor) [pid 7259] close(7) = -1 EBADF (Bad file descriptor) [pid 7259] close(8) = -1 EBADF (Bad file descriptor) [pid 7259] close(9) = -1 EBADF (Bad file descriptor) [pid 7259] close(10) = -1 EBADF (Bad file descriptor) [pid 7259] close(11) = -1 EBADF (Bad file descriptor) [pid 7259] close(12) = -1 EBADF (Bad file descriptor) [pid 7259] close(13) = -1 EBADF (Bad file descriptor) [pid 7259] close(14) = -1 EBADF (Bad file descriptor) [pid 7259] close(15) = -1 EBADF (Bad file descriptor) [pid 7259] close(16) = -1 EBADF (Bad file descriptor) [pid 7259] close(17) = -1 EBADF (Bad file descriptor) [pid 7259] close(18) = -1 EBADF (Bad file descriptor) [pid 7259] close(19) = -1 EBADF (Bad file descriptor) [pid 7259] close(20) = -1 EBADF (Bad file descriptor) [pid 7259] close(21) = -1 EBADF (Bad file descriptor) [pid 7259] close(22) = -1 EBADF (Bad file descriptor) [pid 7259] close(23) = -1 EBADF (Bad file descriptor) [pid 7259] close(24) = -1 EBADF (Bad file descriptor) [pid 7259] close(25) = -1 EBADF (Bad file descriptor) [pid 7259] close(26) = -1 EBADF (Bad file descriptor) [pid 7259] close(27) = -1 EBADF (Bad file descriptor) [pid 7259] close(28) = -1 EBADF (Bad file descriptor) [pid 7259] close(29) = -1 EBADF (Bad file descriptor) [pid 7259] exit_group(0 [pid 7261] <... futex resumed>) = ? [pid 7260] <... futex resumed>) = ? [pid 7261] +++ exited with 0 +++ [pid 7259] <... exit_group resumed>) = ? [pid 7260] +++ exited with 0 +++ [pid 7259] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2217, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./745", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./745", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./745/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./745/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./745/cgroup.cpu") = 0 [pid 5028] umount2("./745/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./745/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./745/binderfs") = 0 [pid 5028] umount2("./745/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./745/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./745/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./745/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./745/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./745/file0") = 0 [pid 5028] umount2("./745/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./745/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./745/cgroup") = 0 [pid 5028] umount2("./745/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./745/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./745/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./745") = 0 [pid 5028] mkdir("./746", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7262 attached , child_tidptr=0x5555563a5690) = 2220 [pid 7262] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7262] chdir("./746") = 0 [pid 7262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7262] setpgid(0, 0) = 0 [pid 7262] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7262] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7262] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7262] write(3, "1000", 4) = 4 [pid 7262] close(3) = 0 [pid 7262] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7262] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7262] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7262] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7262] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7262] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7262] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7263 attached [pid 7263] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7262] <... clone3 resumed> => {parent_tid=[2221]}, 88) = 2221 [pid 7263] <... rseq resumed>) = 0 [pid 7262] rt_sigprocmask(SIG_SETMASK, [], [pid 7263] set_robust_list(0x7feeffcce9a0, 24 [pid 7262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7263] <... set_robust_list resumed>) = 0 [pid 7262] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7262] <... futex resumed>) = 0 [pid 7263] memfd_create("syzkaller", 0) = 3 [pid 7262] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7263] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7263] munmap(0x7feef78ae000, 2097152) = 0 [pid 7263] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7263] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7263] close(3) = 0 [pid 7263] mkdir("./file0", 0777) = 0 [pid 7263] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7263] chdir("./file0") = 0 [pid 7263] ioctl(4, LOOP_CLR_FD) = 0 [pid 7263] close(4) = 0 [pid 7263] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7262] <... futex resumed>) = 0 [pid 7263] <... futex resumed>) = 1 [pid 7262] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7263] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7262] <... futex resumed>) = 0 [pid 7263] <... openat resumed>) = 4 [pid 7262] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7263] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7262] <... futex resumed>) = 0 [pid 7263] <... futex resumed>) = 1 [pid 7262] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7263] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7262] <... futex resumed>) = 0 [pid 7263] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7262] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7263] <... futex resumed>) = 0 [pid 7263] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7262] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7263] <... futex resumed>) = 0 [pid 7263] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 237.259632][ T7263] loop0: detected capacity change from 0 to 4096 [ 237.268662][ T7263] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 237.301081][ T7263] ntfs: volume version 3.1. [pid 7262] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7262] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7262] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7262] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7262] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2222]}, 88) = 2222 [pid 7262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7262] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7262] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7264 attached [pid 7264] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7264] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7264] ftruncate(4, 0) = 0 [pid 7264] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7263] <... write resumed>) = 1048064 [pid 7264] <... futex resumed>) = 1 [pid 7263] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7263] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7262] <... futex resumed>) = 0 [pid 7262] close(3) = 0 [pid 7264] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7262] close(4) = 0 [pid 7262] close(5) = 0 [pid 7262] close(6) = -1 EBADF (Bad file descriptor) [pid 7262] close(7) = -1 EBADF (Bad file descriptor) [pid 7262] close(8) = -1 EBADF (Bad file descriptor) [pid 7262] close(9) = -1 EBADF (Bad file descriptor) [pid 7262] close(10) = -1 EBADF (Bad file descriptor) [pid 7262] close(11) = -1 EBADF (Bad file descriptor) [pid 7262] close(12) = -1 EBADF (Bad file descriptor) [pid 7262] close(13) = -1 EBADF (Bad file descriptor) [pid 7262] close(14) = -1 EBADF (Bad file descriptor) [pid 7262] close(15) = -1 EBADF (Bad file descriptor) [pid 7262] close(16) = -1 EBADF (Bad file descriptor) [pid 7262] close(17) = -1 EBADF (Bad file descriptor) [pid 7262] close(18) = -1 EBADF (Bad file descriptor) [pid 7262] close(19) = -1 EBADF (Bad file descriptor) [pid 7262] close(20) = -1 EBADF (Bad file descriptor) [pid 7262] close(21) = -1 EBADF (Bad file descriptor) [pid 7262] close(22) = -1 EBADF (Bad file descriptor) [pid 7262] close(23) = -1 EBADF (Bad file descriptor) [pid 7262] close(24) = -1 EBADF (Bad file descriptor) [pid 7262] close(25) = -1 EBADF (Bad file descriptor) [pid 7262] close(26) = -1 EBADF (Bad file descriptor) [pid 7262] close(27) = -1 EBADF (Bad file descriptor) [pid 7262] close(28) = -1 EBADF (Bad file descriptor) [pid 7262] close(29) = -1 EBADF (Bad file descriptor) [pid 7262] exit_group(0) = ? [pid 7263] <... futex resumed>) = ? [pid 7264] <... futex resumed>) = ? [pid 7263] +++ exited with 0 +++ [pid 7264] +++ exited with 0 +++ [pid 7262] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2220, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./746", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./746", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./746/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./746/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./746/cgroup.cpu") = 0 [pid 5028] umount2("./746/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./746/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./746/binderfs") = 0 [pid 5028] umount2("./746/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./746/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./746/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./746/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./746/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./746/file0") = 0 [pid 5028] umount2("./746/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./746/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./746/cgroup") = 0 [pid 5028] umount2("./746/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./746/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./746/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./746") = 0 [pid 5028] mkdir("./747", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7265 attached , child_tidptr=0x5555563a5690) = 2223 [pid 7265] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7265] chdir("./747") = 0 [pid 7265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7265] setpgid(0, 0) = 0 [pid 7265] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7265] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7265] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7265] write(3, "1000", 4) = 4 [pid 7265] close(3) = 0 [pid 7265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7265] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7265] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7265] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7266 attached => {parent_tid=[2224]}, 88) = 2224 [pid 7265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7265] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7266] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7266] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7266] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7266] memfd_create("syzkaller", 0) = 3 [pid 7266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7266] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7266] munmap(0x7feef78ae000, 2097152) = 0 [pid 7266] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7266] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7266] close(3) = 0 [pid 7266] mkdir("./file0", 0777) = 0 [pid 7266] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7266] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7266] chdir("./file0") = 0 [pid 7266] ioctl(4, LOOP_CLR_FD) = 0 [pid 7266] close(4) = 0 [pid 7266] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7266] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] <... futex resumed>) = 0 [pid 7265] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7266] <... futex resumed>) = 0 [pid 7265] <... futex resumed>) = 1 [pid 7266] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7265] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7266] <... openat resumed>) = 4 [pid 7266] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7265] <... futex resumed>) = 0 [pid 7266] <... futex resumed>) = 1 [pid 7265] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7266] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7265] <... futex resumed>) = 0 [pid 7265] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7266] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7265] <... futex resumed>) = 0 [pid 7265] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 237.494837][ T7266] loop0: detected capacity change from 0 to 4096 [ 237.504010][ T7266] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 237.538511][ T7266] ntfs: volume version 3.1. [pid 7266] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7265] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7265] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7265] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7267 attached [pid 7267] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7265] <... clone3 resumed> => {parent_tid=[2225]}, 88) = 2225 [pid 7267] set_robust_list(0x7feef7aad9a0, 24 [pid 7265] rt_sigprocmask(SIG_SETMASK, [], [pid 7267] <... set_robust_list resumed>) = 0 [pid 7265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7267] rt_sigprocmask(SIG_SETMASK, [], [pid 7265] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7265] <... futex resumed>) = 0 [pid 7267] ftruncate(4, 0 [pid 7265] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7267] <... ftruncate resumed>) = 0 [pid 7266] <... write resumed>) = 1048064 [pid 7266] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7267] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7266] <... futex resumed>) = 0 [pid 7266] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7267] <... futex resumed>) = 1 [pid 7267] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7265] <... futex resumed>) = 0 [pid 7265] close(3) = 0 [pid 7265] close(4) = 0 [pid 7265] close(5) = 0 [pid 7265] close(6) = -1 EBADF (Bad file descriptor) [pid 7265] close(7) = -1 EBADF (Bad file descriptor) [pid 7265] close(8) = -1 EBADF (Bad file descriptor) [pid 7265] close(9) = -1 EBADF (Bad file descriptor) [pid 7265] close(10) = -1 EBADF (Bad file descriptor) [pid 7265] close(11) = -1 EBADF (Bad file descriptor) [pid 7265] close(12) = -1 EBADF (Bad file descriptor) [pid 7265] close(13) = -1 EBADF (Bad file descriptor) [pid 7265] close(14) = -1 EBADF (Bad file descriptor) [pid 7265] close(15) = -1 EBADF (Bad file descriptor) [pid 7265] close(16) = -1 EBADF (Bad file descriptor) [pid 7265] close(17) = -1 EBADF (Bad file descriptor) [pid 7265] close(18) = -1 EBADF (Bad file descriptor) [pid 7265] close(19) = -1 EBADF (Bad file descriptor) [pid 7265] close(20) = -1 EBADF (Bad file descriptor) [pid 7265] close(21) = -1 EBADF (Bad file descriptor) [pid 7265] close(22) = -1 EBADF (Bad file descriptor) [pid 7265] close(23) = -1 EBADF (Bad file descriptor) [pid 7265] close(24) = -1 EBADF (Bad file descriptor) [pid 7265] close(25) = -1 EBADF (Bad file descriptor) [pid 7265] close(26) = -1 EBADF (Bad file descriptor) [pid 7265] close(27) = -1 EBADF (Bad file descriptor) [pid 7265] close(28) = -1 EBADF (Bad file descriptor) [pid 7265] close(29) = -1 EBADF (Bad file descriptor) [pid 7265] exit_group(0) = ? [pid 7266] <... futex resumed>) = ? [pid 7267] <... futex resumed>) = ? [pid 7266] +++ exited with 0 +++ [pid 7267] +++ exited with 0 +++ [pid 7265] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2223, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./747", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./747", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./747/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./747/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./747/cgroup.cpu") = 0 [pid 5028] umount2("./747/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./747/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./747/binderfs") = 0 [pid 5028] umount2("./747/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./747/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./747/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./747/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./747/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./747/file0") = 0 [pid 5028] umount2("./747/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./747/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./747/cgroup") = 0 [pid 5028] umount2("./747/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./747/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./747/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./747") = 0 [pid 5028] mkdir("./748", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7268 attached , child_tidptr=0x5555563a5690) = 2226 [pid 7268] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7268] chdir("./748") = 0 [pid 7268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7268] setpgid(0, 0) = 0 [pid 7268] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7268] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7268] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7268] write(3, "1000", 4) = 4 [pid 7268] close(3) = 0 [pid 7268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7268] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7268] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7268] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7268] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7269 attached [pid 7269] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7268] <... clone3 resumed> => {parent_tid=[2227]}, 88) = 2227 [pid 7269] <... rseq resumed>) = 0 [pid 7268] rt_sigprocmask(SIG_SETMASK, [], [pid 7269] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7269] rt_sigprocmask(SIG_SETMASK, [], [pid 7268] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7269] memfd_create("syzkaller", 0 [pid 7268] <... futex resumed>) = 0 [pid 7268] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7269] <... memfd_create resumed>) = 3 [pid 7269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7269] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7269] munmap(0x7feef78ae000, 2097152) = 0 [pid 7269] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7269] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7269] close(3) = 0 [pid 7269] mkdir("./file0", 0777) = 0 [pid 7269] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7269] chdir("./file0") = 0 [pid 7269] ioctl(4, LOOP_CLR_FD) = 0 [pid 7269] close(4) = 0 [pid 7269] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7268] <... futex resumed>) = 0 [pid 7269] <... futex resumed>) = 1 [pid 7268] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7269] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7268] <... futex resumed>) = 0 [pid 7268] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7269] <... openat resumed>) = 4 [pid 7269] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7268] <... futex resumed>) = 0 [pid 7268] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7269] <... futex resumed>) = 1 [pid 7268] <... futex resumed>) = 0 [pid 7268] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7269] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7269] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7268] <... futex resumed>) = 0 [pid 7269] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7268] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7269] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7268] <... futex resumed>) = 0 [ 237.730806][ T7269] loop0: detected capacity change from 0 to 4096 [ 237.740012][ T7269] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 237.772895][ T7269] ntfs: volume version 3.1. [pid 7268] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7268] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7268] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7268] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7268] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7270 attached [pid 7270] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7268] <... clone3 resumed> => {parent_tid=[2228]}, 88) = 2228 [pid 7268] rt_sigprocmask(SIG_SETMASK, [], [pid 7270] set_robust_list(0x7feef7aad9a0, 24 [pid 7268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7270] <... set_robust_list resumed>) = 0 [pid 7268] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7270] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7268] <... futex resumed>) = 0 [pid 7270] ftruncate(4, 0 [pid 7268] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7270] <... ftruncate resumed>) = 0 [pid 7270] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7268] <... futex resumed>) = 0 [pid 7270] <... futex resumed>) = 1 [pid 7270] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7269] <... write resumed>) = 1048064 [pid 7269] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7269] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7268] close(3) = 0 [pid 7268] close(4) = 0 [pid 7268] close(5) = 0 [pid 7268] close(6) = -1 EBADF (Bad file descriptor) [pid 7268] close(7) = -1 EBADF (Bad file descriptor) [pid 7268] close(8) = -1 EBADF (Bad file descriptor) [pid 7268] close(9) = -1 EBADF (Bad file descriptor) [pid 7268] close(10) = -1 EBADF (Bad file descriptor) [pid 7268] close(11) = -1 EBADF (Bad file descriptor) [pid 7268] close(12) = -1 EBADF (Bad file descriptor) [pid 7268] close(13) = -1 EBADF (Bad file descriptor) [pid 7268] close(14) = -1 EBADF (Bad file descriptor) [pid 7268] close(15) = -1 EBADF (Bad file descriptor) [pid 7268] close(16) = -1 EBADF (Bad file descriptor) [pid 7268] close(17) = -1 EBADF (Bad file descriptor) [pid 7268] close(18) = -1 EBADF (Bad file descriptor) [pid 7268] close(19) = -1 EBADF (Bad file descriptor) [pid 7268] close(20) = -1 EBADF (Bad file descriptor) [pid 7268] close(21) = -1 EBADF (Bad file descriptor) [pid 7268] close(22) = -1 EBADF (Bad file descriptor) [pid 7268] close(23) = -1 EBADF (Bad file descriptor) [pid 7268] close(24) = -1 EBADF (Bad file descriptor) [pid 7268] close(25) = -1 EBADF (Bad file descriptor) [pid 7268] close(26) = -1 EBADF (Bad file descriptor) [pid 7268] close(27) = -1 EBADF (Bad file descriptor) [pid 7268] close(28) = -1 EBADF (Bad file descriptor) [pid 7268] close(29) = -1 EBADF (Bad file descriptor) [pid 7268] exit_group(0 [pid 7269] <... futex resumed>) = ? [pid 7268] <... exit_group resumed>) = ? [pid 7270] <... futex resumed>) = ? [pid 7269] +++ exited with 0 +++ [pid 7270] +++ exited with 0 +++ [pid 7268] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2226, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./748", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./748", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./748/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./748/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./748/cgroup.cpu") = 0 [pid 5028] umount2("./748/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./748/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./748/binderfs") = 0 [pid 5028] umount2("./748/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./748/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./748/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./748/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./748/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./748/file0") = 0 [pid 5028] umount2("./748/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./748/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./748/cgroup") = 0 [pid 5028] umount2("./748/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./748/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./748/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./748") = 0 [pid 5028] mkdir("./749", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2229 ./strace-static-x86_64: Process 7271 attached [pid 7271] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7271] chdir("./749") = 0 [pid 7271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7271] setpgid(0, 0) = 0 [pid 7271] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7271] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7271] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7271] write(3, "1000", 4) = 4 [pid 7271] close(3) = 0 [pid 7271] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7271] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7271] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7271] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7271] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7271] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7272 attached => {parent_tid=[2230]}, 88) = 2230 [pid 7272] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7271] rt_sigprocmask(SIG_SETMASK, [], [pid 7272] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7271] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7271] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7272] memfd_create("syzkaller", 0) = 3 [pid 7272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7272] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7272] munmap(0x7feef78ae000, 2097152) = 0 [pid 7272] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7272] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7272] close(3) = 0 [pid 7272] mkdir("./file0", 0777) = 0 [pid 7272] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7272] chdir("./file0") = 0 [pid 7272] ioctl(4, LOOP_CLR_FD) = 0 [pid 7272] close(4) = 0 [pid 7272] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7271] <... futex resumed>) = 0 [pid 7272] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7271] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7271] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7272] <... openat resumed>) = 4 [pid 7272] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7271] <... futex resumed>) = 0 [pid 7272] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7271] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7271] <... futex resumed>) = 0 [pid 7272] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7271] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7272] <... openat resumed>) = 5 [pid 7272] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7271] <... futex resumed>) = 0 [pid 7271] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7271] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7272] <... futex resumed>) = 1 [ 237.979254][ T7272] loop0: detected capacity change from 0 to 4096 [ 237.988015][ T7272] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 238.020040][ T7272] ntfs: volume version 3.1. [pid 7272] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7271] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7271] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7271] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7273 attached => {parent_tid=[2231]}, 88) = 2231 [pid 7273] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7271] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7271] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7273] <... rseq resumed>) = 0 [pid 7273] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7273] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7273] ftruncate(4, 0) = 0 [pid 7273] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7272] <... write resumed>) = 1048064 [pid 7273] <... futex resumed>) = 1 [pid 7272] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7273] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7272] <... futex resumed>) = 0 [pid 7272] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7271] <... futex resumed>) = 0 [pid 7271] close(3) = 0 [pid 7271] close(4) = 0 [pid 7271] close(5) = 0 [pid 7271] close(6) = -1 EBADF (Bad file descriptor) [pid 7271] close(7) = -1 EBADF (Bad file descriptor) [pid 7271] close(8) = -1 EBADF (Bad file descriptor) [pid 7271] close(9) = -1 EBADF (Bad file descriptor) [pid 7271] close(10) = -1 EBADF (Bad file descriptor) [pid 7271] close(11) = -1 EBADF (Bad file descriptor) [pid 7271] close(12) = -1 EBADF (Bad file descriptor) [pid 7271] close(13) = -1 EBADF (Bad file descriptor) [pid 7271] close(14) = -1 EBADF (Bad file descriptor) [pid 7271] close(15) = -1 EBADF (Bad file descriptor) [pid 7271] close(16) = -1 EBADF (Bad file descriptor) [pid 7271] close(17) = -1 EBADF (Bad file descriptor) [pid 7271] close(18) = -1 EBADF (Bad file descriptor) [pid 7271] close(19) = -1 EBADF (Bad file descriptor) [pid 7271] close(20) = -1 EBADF (Bad file descriptor) [pid 7271] close(21) = -1 EBADF (Bad file descriptor) [pid 7271] close(22) = -1 EBADF (Bad file descriptor) [pid 7271] close(23) = -1 EBADF (Bad file descriptor) [pid 7271] close(24) = -1 EBADF (Bad file descriptor) [pid 7271] close(25) = -1 EBADF (Bad file descriptor) [pid 7271] close(26) = -1 EBADF (Bad file descriptor) [pid 7271] close(27) = -1 EBADF (Bad file descriptor) [pid 7271] close(28) = -1 EBADF (Bad file descriptor) [pid 7271] close(29) = -1 EBADF (Bad file descriptor) [pid 7271] exit_group(0) = ? [pid 7272] <... futex resumed>) = ? [pid 7273] <... futex resumed>) = ? [pid 7273] +++ exited with 0 +++ [pid 7272] +++ exited with 0 +++ [pid 7271] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2229, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./749", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./749", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./749/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./749/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./749/cgroup.cpu") = 0 [pid 5028] umount2("./749/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./749/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./749/binderfs") = 0 [pid 5028] umount2("./749/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./749/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./749/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./749/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./749/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./749/file0") = 0 [pid 5028] umount2("./749/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./749/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./749/cgroup") = 0 [pid 5028] umount2("./749/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./749/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./749/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./749") = 0 [pid 5028] mkdir("./750", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7274 attached , child_tidptr=0x5555563a5690) = 2232 [pid 7274] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7274] chdir("./750") = 0 [pid 7274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7274] setpgid(0, 0) = 0 [pid 7274] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7274] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7274] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7274] write(3, "1000", 4) = 4 [pid 7274] close(3) = 0 [pid 7274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7274] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7274] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7274] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7274] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7274] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7275 attached [pid 7275] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7274] <... clone3 resumed> => {parent_tid=[2233]}, 88) = 2233 [pid 7275] <... rseq resumed>) = 0 [pid 7274] rt_sigprocmask(SIG_SETMASK, [], [pid 7275] set_robust_list(0x7feeffcce9a0, 24 [pid 7274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7275] <... set_robust_list resumed>) = 0 [pid 7274] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7274] <... futex resumed>) = 0 [pid 7275] memfd_create("syzkaller", 0) = 3 [pid 7274] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7275] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7275] munmap(0x7feef78ae000, 2097152) = 0 [pid 7275] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7275] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7275] close(3) = 0 [pid 7275] mkdir("./file0", 0777) = 0 [pid 7275] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7275] chdir("./file0") = 0 [pid 7275] ioctl(4, LOOP_CLR_FD) = 0 [pid 7275] close(4) = 0 [pid 7275] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7274] <... futex resumed>) = 0 [pid 7275] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7274] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7275] <... futex resumed>) = 0 [pid 7274] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7275] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7274] <... futex resumed>) = 0 [pid 7275] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7274] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7274] <... futex resumed>) = 0 [pid 7275] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7274] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7275] <... openat resumed>) = 5 [pid 7275] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7274] <... futex resumed>) = 0 [pid 7275] <... futex resumed>) = 1 [pid 7274] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7275] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7274] <... futex resumed>) = 0 [ 238.212088][ T7275] loop0: detected capacity change from 0 to 4096 [ 238.221057][ T7275] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 238.253658][ T7275] ntfs: volume version 3.1. [pid 7274] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7274] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7274] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7274] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7276 attached [pid 7276] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7274] <... clone3 resumed> => {parent_tid=[2234]}, 88) = 2234 [pid 7276] <... rseq resumed>) = 0 [pid 7274] rt_sigprocmask(SIG_SETMASK, [], [pid 7276] set_robust_list(0x7feef7aad9a0, 24 [pid 7274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7276] <... set_robust_list resumed>) = 0 [pid 7274] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7276] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7274] <... futex resumed>) = 0 [pid 7274] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7276] ftruncate(4, 0) = 0 [pid 7276] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7274] <... futex resumed>) = 0 [pid 7276] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7275] <... write resumed>) = 1048064 [pid 7275] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7275] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7274] close(3) = 0 [pid 7274] close(4) = 0 [pid 7274] close(5) = 0 [pid 7274] close(6) = -1 EBADF (Bad file descriptor) [pid 7274] close(7) = -1 EBADF (Bad file descriptor) [pid 7274] close(8) = -1 EBADF (Bad file descriptor) [pid 7274] close(9) = -1 EBADF (Bad file descriptor) [pid 7274] close(10) = -1 EBADF (Bad file descriptor) [pid 7274] close(11) = -1 EBADF (Bad file descriptor) [pid 7274] close(12) = -1 EBADF (Bad file descriptor) [pid 7274] close(13) = -1 EBADF (Bad file descriptor) [pid 7274] close(14) = -1 EBADF (Bad file descriptor) [pid 7274] close(15) = -1 EBADF (Bad file descriptor) [pid 7274] close(16) = -1 EBADF (Bad file descriptor) [pid 7274] close(17) = -1 EBADF (Bad file descriptor) [pid 7274] close(18) = -1 EBADF (Bad file descriptor) [pid 7274] close(19) = -1 EBADF (Bad file descriptor) [pid 7274] close(20) = -1 EBADF (Bad file descriptor) [pid 7274] close(21) = -1 EBADF (Bad file descriptor) [pid 7274] close(22) = -1 EBADF (Bad file descriptor) [pid 7274] close(23) = -1 EBADF (Bad file descriptor) [pid 7274] close(24) = -1 EBADF (Bad file descriptor) [pid 7274] close(25) = -1 EBADF (Bad file descriptor) [pid 7274] close(26) = -1 EBADF (Bad file descriptor) [pid 7274] close(27) = -1 EBADF (Bad file descriptor) [pid 7274] close(28) = -1 EBADF (Bad file descriptor) [pid 7274] close(29) = -1 EBADF (Bad file descriptor) [pid 7274] exit_group(0 [pid 7276] <... futex resumed>) = ? [pid 7275] <... futex resumed>) = ? [pid 7274] <... exit_group resumed>) = ? [pid 7276] +++ exited with 0 +++ [pid 7275] +++ exited with 0 +++ [pid 7274] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2232, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./750", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./750", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./750/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./750/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./750/cgroup.cpu") = 0 [pid 5028] umount2("./750/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./750/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./750/binderfs") = 0 [pid 5028] umount2("./750/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./750/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./750/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./750/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./750/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./750/file0") = 0 [pid 5028] umount2("./750/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./750/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./750/cgroup") = 0 [pid 5028] umount2("./750/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./750/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./750/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./750") = 0 [pid 5028] mkdir("./751", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7277 attached , child_tidptr=0x5555563a5690) = 2235 [pid 7277] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7277] chdir("./751") = 0 [pid 7277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7277] setpgid(0, 0) = 0 [pid 7277] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7277] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7277] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7277] write(3, "1000", 4) = 4 [pid 7277] close(3) = 0 [pid 7277] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7277] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7277] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7277] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7277] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7277] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7278 attached [pid 7278] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7278] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7278] rt_sigprocmask(SIG_SETMASK, [], [pid 7277] <... clone3 resumed> => {parent_tid=[2236]}, 88) = 2236 [pid 7277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7277] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7277] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7278] memfd_create("syzkaller", 0) = 3 [pid 7278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7278] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7278] munmap(0x7feef78ae000, 2097152) = 0 [pid 7278] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7278] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7278] close(3) = 0 [pid 7278] mkdir("./file0", 0777) = 0 [pid 7278] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7278] chdir("./file0") = 0 [pid 7278] ioctl(4, LOOP_CLR_FD) = 0 [pid 7278] close(4) = 0 [pid 7278] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7277] <... futex resumed>) = 0 [pid 7277] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7277] <... futex resumed>) = 0 [pid 7278] <... openat resumed>) = 4 [pid 7277] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7278] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7277] <... futex resumed>) = 0 [pid 7278] <... futex resumed>) = 1 [pid 7277] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7277] <... futex resumed>) = 0 [pid 7277] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7278] <... openat resumed>) = 5 [pid 7278] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7277] <... futex resumed>) = 0 [pid 7277] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7278] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7277] <... futex resumed>) = 0 [ 238.434841][ T7278] loop0: detected capacity change from 0 to 4096 [ 238.444578][ T7278] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 238.476909][ T7278] ntfs: volume version 3.1. [pid 7277] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7277] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7277] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7277] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7279 attached => {parent_tid=[2237]}, 88) = 2237 [pid 7279] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7277] rt_sigprocmask(SIG_SETMASK, [], [pid 7279] set_robust_list(0x7feef7aad9a0, 24 [pid 7277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7279] <... set_robust_list resumed>) = 0 [pid 7277] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7279] rt_sigprocmask(SIG_SETMASK, [], [pid 7277] <... futex resumed>) = 0 [pid 7279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7279] ftruncate(4, 0 [pid 7277] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7279] <... ftruncate resumed>) = 0 [pid 7279] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7277] <... futex resumed>) = 0 [pid 7279] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7278] <... write resumed>) = 1048064 [pid 7278] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7278] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7277] close(3) = 0 [pid 7277] close(4) = 0 [pid 7277] close(5) = 0 [pid 7277] close(6) = -1 EBADF (Bad file descriptor) [pid 7277] close(7) = -1 EBADF (Bad file descriptor) [pid 7277] close(8) = -1 EBADF (Bad file descriptor) [pid 7277] close(9) = -1 EBADF (Bad file descriptor) [pid 7277] close(10) = -1 EBADF (Bad file descriptor) [pid 7277] close(11) = -1 EBADF (Bad file descriptor) [pid 7277] close(12) = -1 EBADF (Bad file descriptor) [pid 7277] close(13) = -1 EBADF (Bad file descriptor) [pid 7277] close(14) = -1 EBADF (Bad file descriptor) [pid 7277] close(15) = -1 EBADF (Bad file descriptor) [pid 7277] close(16) = -1 EBADF (Bad file descriptor) [pid 7277] close(17) = -1 EBADF (Bad file descriptor) [pid 7277] close(18) = -1 EBADF (Bad file descriptor) [pid 7277] close(19) = -1 EBADF (Bad file descriptor) [pid 7277] close(20) = -1 EBADF (Bad file descriptor) [pid 7277] close(21) = -1 EBADF (Bad file descriptor) [pid 7277] close(22) = -1 EBADF (Bad file descriptor) [pid 7277] close(23) = -1 EBADF (Bad file descriptor) [pid 7277] close(24) = -1 EBADF (Bad file descriptor) [pid 7277] close(25) = -1 EBADF (Bad file descriptor) [pid 7277] close(26) = -1 EBADF (Bad file descriptor) [pid 7277] close(27) = -1 EBADF (Bad file descriptor) [pid 7277] close(28) = -1 EBADF (Bad file descriptor) [pid 7277] close(29) = -1 EBADF (Bad file descriptor) [pid 7277] exit_group(0) = ? [pid 7278] <... futex resumed>) = ? [pid 7279] <... futex resumed>) = ? [pid 7278] +++ exited with 0 +++ [pid 7279] +++ exited with 0 +++ [pid 7277] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2235, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./751", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./751", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./751/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./751/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./751/cgroup.cpu") = 0 [pid 5028] umount2("./751/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./751/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./751/binderfs") = 0 [pid 5028] umount2("./751/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./751/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./751/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./751/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./751/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./751/file0") = 0 [pid 5028] umount2("./751/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./751/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./751/cgroup") = 0 [pid 5028] umount2("./751/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./751/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./751/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./751") = 0 [pid 5028] mkdir("./752", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7280 attached , child_tidptr=0x5555563a5690) = 2238 [pid 7280] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7280] chdir("./752") = 0 [pid 7280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7280] setpgid(0, 0) = 0 [pid 7280] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7280] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7280] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7280] write(3, "1000", 4) = 4 [pid 7280] close(3) = 0 [pid 7280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7280] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7280] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7280] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7280] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7280] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7280] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7281 attached => {parent_tid=[2239]}, 88) = 2239 [pid 7281] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7280] rt_sigprocmask(SIG_SETMASK, [], [pid 7281] <... rseq resumed>) = 0 [pid 7280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7281] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7281] rt_sigprocmask(SIG_SETMASK, [], [pid 7280] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7280] <... futex resumed>) = 0 [pid 7281] memfd_create("syzkaller", 0 [pid 7280] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7281] <... memfd_create resumed>) = 3 [pid 7281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7281] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7281] munmap(0x7feef78ae000, 2097152) = 0 [pid 7281] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7281] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7281] close(3) = 0 [pid 7281] mkdir("./file0", 0777) = 0 [pid 7281] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7281] chdir("./file0") = 0 [pid 7281] ioctl(4, LOOP_CLR_FD) = 0 [pid 7281] close(4) = 0 [pid 7281] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7280] <... futex resumed>) = 0 [pid 7280] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7281] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7280] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7281] <... openat resumed>) = 4 [pid 7281] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7280] <... futex resumed>) = 0 [pid 7280] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7280] <... futex resumed>) = 0 [pid 7281] <... openat resumed>) = 5 [pid 7280] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7281] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7281] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7280] <... futex resumed>) = 0 [pid 7280] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7281] <... futex resumed>) = 0 [pid 7280] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 238.662029][ T7281] loop0: detected capacity change from 0 to 4096 [ 238.671651][ T7281] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 238.704292][ T7281] ntfs: volume version 3.1. [pid 7281] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7280] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7280] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7280] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7280] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7280] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7282 attached => {parent_tid=[2240]}, 88) = 2240 [pid 7282] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7280] rt_sigprocmask(SIG_SETMASK, [], [pid 7282] <... rseq resumed>) = 0 [pid 7280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7282] set_robust_list(0x7feef7aad9a0, 24 [pid 7280] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7282] <... set_robust_list resumed>) = 0 [pid 7280] <... futex resumed>) = 0 [pid 7282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7280] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7282] ftruncate(4, 0) = 0 [pid 7282] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7281] <... write resumed>) = 1048064 [pid 7281] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7282] <... futex resumed>) = 1 [pid 7281] <... futex resumed>) = 0 [pid 7280] <... futex resumed>) = 0 [pid 7282] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7281] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7280] close(3) = 0 [pid 7280] close(4) = 0 [pid 7280] close(5) = 0 [pid 7280] close(6) = -1 EBADF (Bad file descriptor) [pid 7280] close(7) = -1 EBADF (Bad file descriptor) [pid 7280] close(8) = -1 EBADF (Bad file descriptor) [pid 7280] close(9) = -1 EBADF (Bad file descriptor) [pid 7280] close(10) = -1 EBADF (Bad file descriptor) [pid 7280] close(11) = -1 EBADF (Bad file descriptor) [pid 7280] close(12) = -1 EBADF (Bad file descriptor) [pid 7280] close(13) = -1 EBADF (Bad file descriptor) [pid 7280] close(14) = -1 EBADF (Bad file descriptor) [pid 7280] close(15) = -1 EBADF (Bad file descriptor) [pid 7280] close(16) = -1 EBADF (Bad file descriptor) [pid 7280] close(17) = -1 EBADF (Bad file descriptor) [pid 7280] close(18) = -1 EBADF (Bad file descriptor) [pid 7280] close(19) = -1 EBADF (Bad file descriptor) [pid 7280] close(20) = -1 EBADF (Bad file descriptor) [pid 7280] close(21) = -1 EBADF (Bad file descriptor) [pid 7280] close(22) = -1 EBADF (Bad file descriptor) [pid 7280] close(23) = -1 EBADF (Bad file descriptor) [pid 7280] close(24) = -1 EBADF (Bad file descriptor) [pid 7280] close(25) = -1 EBADF (Bad file descriptor) [pid 7280] close(26) = -1 EBADF (Bad file descriptor) [pid 7280] close(27) = -1 EBADF (Bad file descriptor) [pid 7280] close(28) = -1 EBADF (Bad file descriptor) [pid 7280] close(29) = -1 EBADF (Bad file descriptor) [pid 7280] exit_group(0) = ? [pid 7281] <... futex resumed>) = ? [pid 7282] <... futex resumed>) = ? [pid 7281] +++ exited with 0 +++ [pid 7282] +++ exited with 0 +++ [pid 7280] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2238, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./752", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./752", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./752/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./752/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./752/cgroup.cpu") = 0 [pid 5028] umount2("./752/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./752/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./752/binderfs") = 0 [pid 5028] umount2("./752/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./752/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./752/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./752/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./752/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./752/file0") = 0 [pid 5028] umount2("./752/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./752/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./752/cgroup") = 0 [pid 5028] umount2("./752/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./752/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./752/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./752") = 0 [pid 5028] mkdir("./753", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2241 ./strace-static-x86_64: Process 7283 attached [pid 7283] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7283] chdir("./753") = 0 [pid 7283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7283] setpgid(0, 0) = 0 [pid 7283] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7283] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7283] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7283] write(3, "1000", 4) = 4 [pid 7283] close(3) = 0 [pid 7283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7283] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7283] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7283] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7283] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7284 attached [pid 7284] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7283] <... clone3 resumed> => {parent_tid=[2242]}, 88) = 2242 [pid 7284] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7284] rt_sigprocmask(SIG_SETMASK, [], [pid 7283] rt_sigprocmask(SIG_SETMASK, [], [pid 7284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7283] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7283] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7284] memfd_create("syzkaller", 0) = 3 [pid 7284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7284] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7284] munmap(0x7feef78ae000, 2097152) = 0 [pid 7284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7284] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7284] close(3) = 0 [pid 7284] mkdir("./file0", 0777) = 0 [pid 7284] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7284] chdir("./file0") = 0 [pid 7284] ioctl(4, LOOP_CLR_FD) = 0 [pid 7284] close(4) = 0 [pid 7284] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7283] <... futex resumed>) = 0 [pid 7284] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7283] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7284] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7283] <... futex resumed>) = 0 [pid 7284] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7283] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7284] <... openat resumed>) = 4 [pid 7284] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7283] <... futex resumed>) = 0 [pid 7284] <... futex resumed>) = 1 [pid 7283] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7284] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7283] <... futex resumed>) = 0 [pid 7284] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7283] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7284] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7283] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7284] <... futex resumed>) = 0 [pid 7283] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 238.916363][ T7284] loop0: detected capacity change from 0 to 4096 [ 238.938003][ T7284] ntfs: volume version 3.1. [pid 7284] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7283] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7283] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7283] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7283] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7283] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7283] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2243]}, 88) = 2243 ./strace-static-x86_64: Process 7285 attached [pid 7283] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7283] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7285] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7283] <... futex resumed>) = 0 [pid 7285] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7285] rt_sigprocmask(SIG_SETMASK, [], [pid 7283] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7285] ftruncate(4, 0) = 0 [pid 7285] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7285] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7284] <... write resumed>) = 1048064 [pid 7283] <... futex resumed>) = 0 [pid 7284] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7283] close(3 [pid 7284] <... futex resumed>) = 0 [pid 7283] <... close resumed>) = 0 [pid 7283] close(4) = 0 [pid 7284] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7283] close(5) = 0 [pid 7283] close(6) = -1 EBADF (Bad file descriptor) [pid 7283] close(7) = -1 EBADF (Bad file descriptor) [pid 7283] close(8) = -1 EBADF (Bad file descriptor) [pid 7283] close(9) = -1 EBADF (Bad file descriptor) [pid 7283] close(10) = -1 EBADF (Bad file descriptor) [pid 7283] close(11) = -1 EBADF (Bad file descriptor) [pid 7283] close(12) = -1 EBADF (Bad file descriptor) [pid 7283] close(13) = -1 EBADF (Bad file descriptor) [pid 7283] close(14) = -1 EBADF (Bad file descriptor) [pid 7283] close(15) = -1 EBADF (Bad file descriptor) [pid 7283] close(16) = -1 EBADF (Bad file descriptor) [pid 7283] close(17) = -1 EBADF (Bad file descriptor) [pid 7283] close(18) = -1 EBADF (Bad file descriptor) [pid 7283] close(19) = -1 EBADF (Bad file descriptor) [pid 7283] close(20) = -1 EBADF (Bad file descriptor) [pid 7283] close(21) = -1 EBADF (Bad file descriptor) [pid 7283] close(22) = -1 EBADF (Bad file descriptor) [pid 7283] close(23) = -1 EBADF (Bad file descriptor) [pid 7283] close(24) = -1 EBADF (Bad file descriptor) [pid 7283] close(25) = -1 EBADF (Bad file descriptor) [pid 7283] close(26) = -1 EBADF (Bad file descriptor) [pid 7283] close(27) = -1 EBADF (Bad file descriptor) [pid 7283] close(28) = -1 EBADF (Bad file descriptor) [pid 7283] close(29) = -1 EBADF (Bad file descriptor) [pid 7283] exit_group(0) = ? [pid 7285] <... futex resumed>) = ? [pid 7284] <... futex resumed>) = ? [pid 7285] +++ exited with 0 +++ [pid 7284] +++ exited with 0 +++ [pid 7283] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2241, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./753", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./753", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./753/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./753/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./753/cgroup.cpu") = 0 [pid 5028] umount2("./753/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./753/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./753/binderfs") = 0 [pid 5028] umount2("./753/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./753/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./753/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./753/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./753/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./753/file0") = 0 [pid 5028] umount2("./753/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./753/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./753/cgroup") = 0 [pid 5028] umount2("./753/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./753/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./753/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./753") = 0 [pid 5028] mkdir("./754", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7286 attached , child_tidptr=0x5555563a5690) = 2244 [pid 7286] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7286] chdir("./754") = 0 [pid 7286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7286] setpgid(0, 0) = 0 [pid 7286] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7286] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7286] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7286] write(3, "1000", 4) = 4 [pid 7286] close(3) = 0 [pid 7286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7286] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7286] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7286] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7286] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7286] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7286] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7287 attached => {parent_tid=[2245]}, 88) = 2245 [pid 7287] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7286] rt_sigprocmask(SIG_SETMASK, [], [pid 7287] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7286] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7287] memfd_create("syzkaller", 0 [pid 7286] <... futex resumed>) = 0 [pid 7286] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7287] <... memfd_create resumed>) = 3 [pid 7287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7287] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7287] munmap(0x7feef78ae000, 2097152) = 0 [pid 7287] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7287] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7287] close(3) = 0 [pid 7287] mkdir("./file0", 0777) = 0 [pid 7287] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7287] chdir("./file0") = 0 [pid 7287] ioctl(4, LOOP_CLR_FD) = 0 [pid 7287] close(4) = 0 [pid 7287] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7286] <... futex resumed>) = 0 [pid 7287] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7286] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7287] <... futex resumed>) = 0 [pid 7286] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7287] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7287] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7286] <... futex resumed>) = 0 [pid 7287] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7286] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7287] <... futex resumed>) = 0 [pid 7286] <... futex resumed>) = 1 [pid 7287] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7286] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7287] <... openat resumed>) = 5 [pid 7287] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7287] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7286] <... futex resumed>) = 0 [pid 7286] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7287] <... futex resumed>) = 0 [pid 7287] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 239.125470][ T7287] loop0: detected capacity change from 0 to 4096 [ 239.146983][ T7287] ntfs: volume version 3.1. [pid 7286] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7286] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7286] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7286] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7286] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7286] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2246]}, 88) = 2246 [pid 7286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7286] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 7288 attached [pid 7286] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7288] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7288] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7288] ftruncate(4, 0) = 0 [pid 7288] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7287] <... write resumed>) = 1048064 [pid 7286] <... futex resumed>) = 0 [pid 7288] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7287] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7286] close(3 [pid 7287] <... futex resumed>) = 0 [pid 7286] <... close resumed>) = 0 [pid 7287] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7286] close(4) = 0 [pid 7286] close(5) = 0 [pid 7286] close(6) = -1 EBADF (Bad file descriptor) [pid 7286] close(7) = -1 EBADF (Bad file descriptor) [pid 7286] close(8) = -1 EBADF (Bad file descriptor) [pid 7286] close(9) = -1 EBADF (Bad file descriptor) [pid 7286] close(10) = -1 EBADF (Bad file descriptor) [pid 7286] close(11) = -1 EBADF (Bad file descriptor) [pid 7286] close(12) = -1 EBADF (Bad file descriptor) [pid 7286] close(13) = -1 EBADF (Bad file descriptor) [pid 7286] close(14) = -1 EBADF (Bad file descriptor) [pid 7286] close(15) = -1 EBADF (Bad file descriptor) [pid 7286] close(16) = -1 EBADF (Bad file descriptor) [pid 7286] close(17) = -1 EBADF (Bad file descriptor) [pid 7286] close(18) = -1 EBADF (Bad file descriptor) [pid 7286] close(19) = -1 EBADF (Bad file descriptor) [pid 7286] close(20) = -1 EBADF (Bad file descriptor) [pid 7286] close(21) = -1 EBADF (Bad file descriptor) [pid 7286] close(22) = -1 EBADF (Bad file descriptor) [pid 7286] close(23) = -1 EBADF (Bad file descriptor) [pid 7286] close(24) = -1 EBADF (Bad file descriptor) [pid 7286] close(25) = -1 EBADF (Bad file descriptor) [pid 7286] close(26) = -1 EBADF (Bad file descriptor) [pid 7286] close(27) = -1 EBADF (Bad file descriptor) [pid 7286] close(28) = -1 EBADF (Bad file descriptor) [pid 7286] close(29) = -1 EBADF (Bad file descriptor) [pid 7286] exit_group(0 [pid 7288] <... futex resumed>) = ? [pid 7287] <... futex resumed>) = ? [pid 7286] <... exit_group resumed>) = ? [pid 7287] +++ exited with 0 +++ [pid 7288] +++ exited with 0 +++ [pid 7286] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2244, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./754", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./754", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./754/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./754/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./754/cgroup.cpu") = 0 [pid 5028] umount2("./754/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./754/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./754/binderfs") = 0 [pid 5028] umount2("./754/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./754/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./754/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./754/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./754/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./754/file0") = 0 [pid 5028] umount2("./754/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./754/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./754/cgroup") = 0 [pid 5028] umount2("./754/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./754/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./754/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./754") = 0 [pid 5028] mkdir("./755", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7289 attached , child_tidptr=0x5555563a5690) = 2247 [pid 7289] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7289] chdir("./755") = 0 [pid 7289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7289] setpgid(0, 0) = 0 [pid 7289] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7289] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7289] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7289] write(3, "1000", 4) = 4 [pid 7289] close(3) = 0 [pid 7289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7289] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7289] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7289] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7289] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7289] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7290 attached [pid 7290] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7289] <... clone3 resumed> => {parent_tid=[2248]}, 88) = 2248 [pid 7290] set_robust_list(0x7feeffcce9a0, 24 [pid 7289] rt_sigprocmask(SIG_SETMASK, [], [pid 7290] <... set_robust_list resumed>) = 0 [pid 7289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7290] rt_sigprocmask(SIG_SETMASK, [], [pid 7289] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7290] memfd_create("syzkaller", 0 [pid 7289] <... futex resumed>) = 0 [pid 7289] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7290] <... memfd_create resumed>) = 3 [pid 7290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7290] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7290] munmap(0x7feef78ae000, 2097152) = 0 [pid 7290] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7290] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7290] close(3) = 0 [pid 7290] mkdir("./file0", 0777) = 0 [pid 7290] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7290] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7290] chdir("./file0") = 0 [pid 7290] ioctl(4, LOOP_CLR_FD) = 0 [pid 7290] close(4) = 0 [pid 7290] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7289] <... futex resumed>) = 0 [pid 7290] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7289] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7289] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7290] <... openat resumed>) = 4 [pid 7290] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7289] <... futex resumed>) = 0 [pid 7289] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7290] <... futex resumed>) = 1 [pid 7289] <... futex resumed>) = 0 [pid 7290] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7289] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7290] <... openat resumed>) = 5 [pid 7290] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7289] <... futex resumed>) = 0 [pid 7290] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7289] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 239.347167][ T7290] loop0: detected capacity change from 0 to 4096 [ 239.368558][ T7290] ntfs: volume version 3.1. [pid 7289] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7289] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7289] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7289] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7291 attached [pid 7291] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7289] <... clone3 resumed> => {parent_tid=[2249]}, 88) = 2249 [pid 7291] <... rseq resumed>) = 0 [pid 7289] rt_sigprocmask(SIG_SETMASK, [], [pid 7291] set_robust_list(0x7feef7aad9a0, 24 [pid 7289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7291] <... set_robust_list resumed>) = 0 [pid 7291] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7289] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7291] ftruncate(4, 0 [pid 7289] <... futex resumed>) = 0 [pid 7289] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7291] <... ftruncate resumed>) = 0 [pid 7290] <... write resumed>) = 1048064 [pid 7290] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7290] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7291] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7289] <... futex resumed>) = 0 [pid 7291] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7289] close(3) = 0 [pid 7289] close(4) = 0 [pid 7289] close(5) = 0 [pid 7289] close(6) = -1 EBADF (Bad file descriptor) [pid 7289] close(7) = -1 EBADF (Bad file descriptor) [pid 7289] close(8) = -1 EBADF (Bad file descriptor) [pid 7289] close(9) = -1 EBADF (Bad file descriptor) [pid 7289] close(10) = -1 EBADF (Bad file descriptor) [pid 7289] close(11) = -1 EBADF (Bad file descriptor) [pid 7289] close(12) = -1 EBADF (Bad file descriptor) [pid 7289] close(13) = -1 EBADF (Bad file descriptor) [pid 7289] close(14) = -1 EBADF (Bad file descriptor) [pid 7289] close(15) = -1 EBADF (Bad file descriptor) [pid 7289] close(16) = -1 EBADF (Bad file descriptor) [pid 7289] close(17) = -1 EBADF (Bad file descriptor) [pid 7289] close(18) = -1 EBADF (Bad file descriptor) [pid 7289] close(19) = -1 EBADF (Bad file descriptor) [pid 7289] close(20) = -1 EBADF (Bad file descriptor) [pid 7289] close(21) = -1 EBADF (Bad file descriptor) [pid 7289] close(22) = -1 EBADF (Bad file descriptor) [pid 7289] close(23) = -1 EBADF (Bad file descriptor) [pid 7289] close(24) = -1 EBADF (Bad file descriptor) [pid 7289] close(25) = -1 EBADF (Bad file descriptor) [pid 7289] close(26) = -1 EBADF (Bad file descriptor) [pid 7289] close(27) = -1 EBADF (Bad file descriptor) [pid 7289] close(28) = -1 EBADF (Bad file descriptor) [pid 7289] close(29) = -1 EBADF (Bad file descriptor) [pid 7289] exit_group(0) = ? [pid 7291] <... futex resumed>) = ? [pid 7290] <... futex resumed>) = ? [pid 7291] +++ exited with 0 +++ [pid 7290] +++ exited with 0 +++ [pid 7289] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2247, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./755", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./755", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./755/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./755/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./755/cgroup.cpu") = 0 [pid 5028] umount2("./755/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./755/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./755/binderfs") = 0 [pid 5028] umount2("./755/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./755/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./755/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./755/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./755/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./755/file0") = 0 [pid 5028] umount2("./755/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./755/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./755/cgroup") = 0 [pid 5028] umount2("./755/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./755/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./755/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./755") = 0 [pid 5028] mkdir("./756", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7292 attached , child_tidptr=0x5555563a5690) = 2250 [pid 7292] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7292] chdir("./756") = 0 [pid 7292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7292] setpgid(0, 0) = 0 [pid 7292] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7292] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7292] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7292] write(3, "1000", 4) = 4 [pid 7292] close(3) = 0 [pid 7292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7292] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7292] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7292] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7292] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2251]}, 88) = 2251 [pid 7292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7292] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7292] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7293 attached [pid 7293] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7293] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7293] memfd_create("syzkaller", 0) = 3 [pid 7293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7293] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7293] munmap(0x7feef78ae000, 2097152) = 0 [pid 7293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7293] close(3) = 0 [pid 7293] mkdir("./file0", 0777) = 0 [pid 7293] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7293] chdir("./file0") = 0 [pid 7293] ioctl(4, LOOP_CLR_FD) = 0 [pid 7293] close(4) = 0 [pid 7293] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7292] <... futex resumed>) = 0 [pid 7293] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7292] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7293] <... futex resumed>) = 0 [pid 7292] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7293] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7293] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7292] <... futex resumed>) = 0 [pid 7293] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7292] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7292] <... futex resumed>) = 0 [pid 7292] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7293] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7293] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7292] <... futex resumed>) = 0 [pid 7292] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7293] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7292] <... futex resumed>) = 0 [ 239.573182][ T7293] loop0: detected capacity change from 0 to 4096 [ 239.594182][ T7293] ntfs: volume version 3.1. [pid 7292] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7292] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7292] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7292] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7294 attached [pid 7294] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7292] <... clone3 resumed> => {parent_tid=[2252]}, 88) = 2252 [pid 7294] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7294] rt_sigprocmask(SIG_SETMASK, [], [pid 7292] rt_sigprocmask(SIG_SETMASK, [], [pid 7294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7294] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7292] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7294] <... futex resumed>) = 0 [pid 7292] <... futex resumed>) = 1 [pid 7294] ftruncate(4, 0 [pid 7292] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7294] <... ftruncate resumed>) = 0 [pid 7293] <... write resumed>) = 1048064 [pid 7294] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7293] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7294] <... futex resumed>) = 1 [pid 7293] <... futex resumed>) = 0 [pid 7292] <... futex resumed>) = 0 [pid 7294] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7293] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7292] close(3) = 0 [pid 7292] close(4) = 0 [pid 7292] close(5) = 0 [pid 7292] close(6) = -1 EBADF (Bad file descriptor) [pid 7292] close(7) = -1 EBADF (Bad file descriptor) [pid 7292] close(8) = -1 EBADF (Bad file descriptor) [pid 7292] close(9) = -1 EBADF (Bad file descriptor) [pid 7292] close(10) = -1 EBADF (Bad file descriptor) [pid 7292] close(11) = -1 EBADF (Bad file descriptor) [pid 7292] close(12) = -1 EBADF (Bad file descriptor) [pid 7292] close(13) = -1 EBADF (Bad file descriptor) [pid 7292] close(14) = -1 EBADF (Bad file descriptor) [pid 7292] close(15) = -1 EBADF (Bad file descriptor) [pid 7292] close(16) = -1 EBADF (Bad file descriptor) [pid 7292] close(17) = -1 EBADF (Bad file descriptor) [pid 7292] close(18) = -1 EBADF (Bad file descriptor) [pid 7292] close(19) = -1 EBADF (Bad file descriptor) [pid 7292] close(20) = -1 EBADF (Bad file descriptor) [pid 7292] close(21) = -1 EBADF (Bad file descriptor) [pid 7292] close(22) = -1 EBADF (Bad file descriptor) [pid 7292] close(23) = -1 EBADF (Bad file descriptor) [pid 7292] close(24) = -1 EBADF (Bad file descriptor) [pid 7292] close(25) = -1 EBADF (Bad file descriptor) [pid 7292] close(26) = -1 EBADF (Bad file descriptor) [pid 7292] close(27) = -1 EBADF (Bad file descriptor) [pid 7292] close(28) = -1 EBADF (Bad file descriptor) [pid 7292] close(29) = -1 EBADF (Bad file descriptor) [pid 7292] exit_group(0 [pid 7293] <... futex resumed>) = ? [pid 7292] <... exit_group resumed>) = ? [pid 7294] <... futex resumed>) = ? [pid 7293] +++ exited with 0 +++ [pid 7294] +++ exited with 0 +++ [pid 7292] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2250, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./756", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./756", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./756/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./756/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./756/cgroup.cpu") = 0 [pid 5028] umount2("./756/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./756/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./756/binderfs") = 0 [pid 5028] umount2("./756/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./756/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./756/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./756/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./756/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./756/file0") = 0 [pid 5028] umount2("./756/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./756/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./756/cgroup") = 0 [pid 5028] umount2("./756/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./756/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./756/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./756") = 0 [pid 5028] mkdir("./757", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7295 attached , child_tidptr=0x5555563a5690) = 2253 [pid 7295] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7295] chdir("./757") = 0 [pid 7295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7295] setpgid(0, 0) = 0 [pid 7295] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7295] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7295] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7295] write(3, "1000", 4) = 4 [pid 7295] close(3) = 0 [pid 7295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7295] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7295] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7295] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2254]}, 88) = 2254 [pid 7295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7295] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7295] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7296 attached [pid 7296] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7296] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7296] memfd_create("syzkaller", 0) = 3 [pid 7296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7296] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7296] munmap(0x7feef78ae000, 2097152) = 0 [pid 7296] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7296] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7296] close(3) = 0 [pid 7296] mkdir("./file0", 0777) = 0 [pid 7296] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7296] chdir("./file0") = 0 [pid 7296] ioctl(4, LOOP_CLR_FD) = 0 [pid 7296] close(4) = 0 [pid 7296] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7295] <... futex resumed>) = 0 [pid 7296] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7295] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7295] <... futex resumed>) = 0 [pid 7296] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7295] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7296] <... openat resumed>) = 4 [pid 7296] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7295] <... futex resumed>) = 0 [pid 7296] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7295] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7296] <... openat resumed>) = 5 [pid 7295] <... futex resumed>) = 0 [pid 7296] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7295] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7296] <... futex resumed>) = 0 [pid 7295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7296] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7295] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7295] <... futex resumed>) = 0 [pid 7296] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 239.783885][ T7296] loop0: detected capacity change from 0 to 4096 [ 239.805452][ T7296] ntfs: volume version 3.1. [pid 7295] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7295] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7295] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2255]}, 88) = 2255 [pid 7295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7295] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7297 attached ) = 0 [pid 7297] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7295] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7297] <... rseq resumed>) = 0 [pid 7297] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7297] ftruncate(4, 0) = 0 [pid 7297] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7296] <... write resumed>) = 1048064 [pid 7295] <... futex resumed>) = 0 [pid 7297] <... futex resumed>) = 1 [pid 7296] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7297] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7296] <... futex resumed>) = 0 [pid 7295] close(3 [pid 7296] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7295] <... close resumed>) = 0 [pid 7295] close(4) = 0 [pid 7295] close(5) = 0 [pid 7295] close(6) = -1 EBADF (Bad file descriptor) [pid 7295] close(7) = -1 EBADF (Bad file descriptor) [pid 7295] close(8) = -1 EBADF (Bad file descriptor) [pid 7295] close(9) = -1 EBADF (Bad file descriptor) [pid 7295] close(10) = -1 EBADF (Bad file descriptor) [pid 7295] close(11) = -1 EBADF (Bad file descriptor) [pid 7295] close(12) = -1 EBADF (Bad file descriptor) [pid 7295] close(13) = -1 EBADF (Bad file descriptor) [pid 7295] close(14) = -1 EBADF (Bad file descriptor) [pid 7295] close(15) = -1 EBADF (Bad file descriptor) [pid 7295] close(16) = -1 EBADF (Bad file descriptor) [pid 7295] close(17) = -1 EBADF (Bad file descriptor) [pid 7295] close(18) = -1 EBADF (Bad file descriptor) [pid 7295] close(19) = -1 EBADF (Bad file descriptor) [pid 7295] close(20) = -1 EBADF (Bad file descriptor) [pid 7295] close(21) = -1 EBADF (Bad file descriptor) [pid 7295] close(22) = -1 EBADF (Bad file descriptor) [pid 7295] close(23) = -1 EBADF (Bad file descriptor) [pid 7295] close(24) = -1 EBADF (Bad file descriptor) [pid 7295] close(25) = -1 EBADF (Bad file descriptor) [pid 7295] close(26) = -1 EBADF (Bad file descriptor) [pid 7295] close(27) = -1 EBADF (Bad file descriptor) [pid 7295] close(28) = -1 EBADF (Bad file descriptor) [pid 7295] close(29) = -1 EBADF (Bad file descriptor) [pid 7295] exit_group(0) = ? [pid 7296] <... futex resumed>) = ? [pid 7297] <... futex resumed>) = ? [pid 7296] +++ exited with 0 +++ [pid 7297] +++ exited with 0 +++ [pid 7295] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2253, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./757", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./757", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./757/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./757/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./757/cgroup.cpu") = 0 [pid 5028] umount2("./757/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./757/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./757/binderfs") = 0 [pid 5028] umount2("./757/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./757/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./757/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./757/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./757/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./757/file0") = 0 [pid 5028] umount2("./757/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./757/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./757/cgroup") = 0 [pid 5028] umount2("./757/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./757/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./757/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./757") = 0 [pid 5028] mkdir("./758", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7298 attached , child_tidptr=0x5555563a5690) = 2256 [pid 7298] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7298] chdir("./758") = 0 [pid 7298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7298] setpgid(0, 0) = 0 [pid 7298] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7298] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7298] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7298] write(3, "1000", 4) = 4 [pid 7298] close(3) = 0 [pid 7298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7298] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7298] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7298] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7299 attached [pid 7299] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7298] <... clone3 resumed> => {parent_tid=[2257]}, 88) = 2257 [pid 7299] <... rseq resumed>) = 0 [pid 7299] set_robust_list(0x7feeffcce9a0, 24 [pid 7298] rt_sigprocmask(SIG_SETMASK, [], [pid 7299] <... set_robust_list resumed>) = 0 [pid 7299] rt_sigprocmask(SIG_SETMASK, [], [pid 7298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7298] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7298] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7299] memfd_create("syzkaller", 0) = 3 [pid 7299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7299] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7299] munmap(0x7feef78ae000, 2097152) = 0 [pid 7299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7299] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7299] close(3) = 0 [pid 7299] mkdir("./file0", 0777) = 0 [pid 7299] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7299] chdir("./file0") = 0 [pid 7299] ioctl(4, LOOP_CLR_FD) = 0 [pid 7299] close(4) = 0 [pid 7299] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7299] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7298] <... futex resumed>) = 0 [pid 7298] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7298] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7299] <... futex resumed>) = 0 [pid 7299] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7299] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7298] <... futex resumed>) = 0 [pid 7299] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7298] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7299] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7298] <... futex resumed>) = 0 [pid 7299] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7298] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7299] <... openat resumed>) = 5 [pid 7299] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7298] <... futex resumed>) = 0 [pid 7299] <... futex resumed>) = 1 [pid 7298] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7299] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 240.003892][ T7299] loop0: detected capacity change from 0 to 4096 [ 240.025273][ T7299] ntfs: volume version 3.1. [pid 7298] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7298] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7298] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7300 attached => {parent_tid=[2258]}, 88) = 2258 [pid 7298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7298] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7298] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7300] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7300] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7300] ftruncate(4, 0) = 0 [pid 7300] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7299] <... write resumed>) = 1048064 [pid 7298] <... futex resumed>) = 0 [pid 7300] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7299] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7298] close(3 [pid 7299] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7298] <... close resumed>) = 0 [pid 7298] close(4) = 0 [pid 7298] close(5) = 0 [pid 7298] close(6) = -1 EBADF (Bad file descriptor) [pid 7298] close(7) = -1 EBADF (Bad file descriptor) [pid 7298] close(8) = -1 EBADF (Bad file descriptor) [pid 7298] close(9) = -1 EBADF (Bad file descriptor) [pid 7298] close(10) = -1 EBADF (Bad file descriptor) [pid 7298] close(11) = -1 EBADF (Bad file descriptor) [pid 7298] close(12) = -1 EBADF (Bad file descriptor) [pid 7298] close(13) = -1 EBADF (Bad file descriptor) [pid 7298] close(14) = -1 EBADF (Bad file descriptor) [pid 7298] close(15) = -1 EBADF (Bad file descriptor) [pid 7298] close(16) = -1 EBADF (Bad file descriptor) [pid 7298] close(17) = -1 EBADF (Bad file descriptor) [pid 7298] close(18) = -1 EBADF (Bad file descriptor) [pid 7298] close(19) = -1 EBADF (Bad file descriptor) [pid 7298] close(20) = -1 EBADF (Bad file descriptor) [pid 7298] close(21) = -1 EBADF (Bad file descriptor) [pid 7298] close(22) = -1 EBADF (Bad file descriptor) [pid 7298] close(23) = -1 EBADF (Bad file descriptor) [pid 7298] close(24) = -1 EBADF (Bad file descriptor) [pid 7298] close(25) = -1 EBADF (Bad file descriptor) [pid 7298] close(26) = -1 EBADF (Bad file descriptor) [pid 7298] close(27) = -1 EBADF (Bad file descriptor) [pid 7298] close(28) = -1 EBADF (Bad file descriptor) [pid 7298] close(29) = -1 EBADF (Bad file descriptor) [pid 7298] exit_group(0 [pid 7299] <... futex resumed>) = ? [pid 7300] <... futex resumed>) = ? [pid 7298] <... exit_group resumed>) = ? [pid 7300] +++ exited with 0 +++ [pid 7299] +++ exited with 0 +++ [pid 7298] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2256, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./758", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./758", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./758/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./758/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./758/cgroup.cpu") = 0 [pid 5028] umount2("./758/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./758/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./758/binderfs") = 0 [pid 5028] umount2("./758/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./758/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./758/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./758/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./758/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./758/file0") = 0 [pid 5028] umount2("./758/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./758/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./758/cgroup") = 0 [pid 5028] umount2("./758/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./758/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./758/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./758") = 0 [pid 5028] mkdir("./759", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2259 ./strace-static-x86_64: Process 7301 attached [pid 7301] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7301] chdir("./759") = 0 [pid 7301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7301] setpgid(0, 0) = 0 [pid 7301] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7301] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7301] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7301] write(3, "1000", 4) = 4 [pid 7301] close(3) = 0 [pid 7301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7301] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7301] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7301] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7301] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7302 attached [pid 7302] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7301] <... clone3 resumed> => {parent_tid=[2260]}, 88) = 2260 [pid 7302] set_robust_list(0x7feeffcce9a0, 24 [pid 7301] rt_sigprocmask(SIG_SETMASK, [], [pid 7302] <... set_robust_list resumed>) = 0 [pid 7301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7302] rt_sigprocmask(SIG_SETMASK, [], [pid 7301] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7301] <... futex resumed>) = 0 [pid 7301] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7302] memfd_create("syzkaller", 0) = 3 [pid 7302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7302] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7302] munmap(0x7feef78ae000, 2097152) = 0 [pid 7302] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7302] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7302] close(3) = 0 [pid 7302] mkdir("./file0", 0777) = 0 [pid 7302] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7302] chdir("./file0") = 0 [pid 7302] ioctl(4, LOOP_CLR_FD) = 0 [pid 7302] close(4) = 0 [pid 7302] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7302] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7301] <... futex resumed>) = 0 [pid 7301] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7301] <... futex resumed>) = 0 [pid 7302] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7301] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7302] <... openat resumed>) = 4 [pid 7302] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7302] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7301] <... futex resumed>) = 0 [pid 7301] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] <... futex resumed>) = 0 [pid 7301] <... futex resumed>) = 1 [pid 7302] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7301] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7302] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7302] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7301] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] <... futex resumed>) = 0 [pid 7301] <... futex resumed>) = 1 [pid 7302] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 240.217939][ T7302] loop0: detected capacity change from 0 to 4096 [ 240.240077][ T7302] ntfs: volume version 3.1. [pid 7301] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7301] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7301] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7303 attached [pid 7303] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7301] <... clone3 resumed> => {parent_tid=[2261]}, 88) = 2261 [pid 7301] rt_sigprocmask(SIG_SETMASK, [], [pid 7303] <... rseq resumed>) = 0 [pid 7301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7303] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7301] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7303] rt_sigprocmask(SIG_SETMASK, [], [pid 7301] <... futex resumed>) = 0 [pid 7303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7301] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7303] ftruncate(4, 0) = 0 [pid 7303] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7302] <... write resumed>) = 1048064 [pid 7303] <... futex resumed>) = 1 [pid 7303] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7301] <... futex resumed>) = 0 [pid 7302] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7301] close(3 [pid 7302] <... futex resumed>) = 0 [pid 7301] <... close resumed>) = 0 [pid 7301] close(4) = 0 [pid 7302] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7301] close(5) = 0 [pid 7301] close(6) = -1 EBADF (Bad file descriptor) [pid 7301] close(7) = -1 EBADF (Bad file descriptor) [pid 7301] close(8) = -1 EBADF (Bad file descriptor) [pid 7301] close(9) = -1 EBADF (Bad file descriptor) [pid 7301] close(10) = -1 EBADF (Bad file descriptor) [pid 7301] close(11) = -1 EBADF (Bad file descriptor) [pid 7301] close(12) = -1 EBADF (Bad file descriptor) [pid 7301] close(13) = -1 EBADF (Bad file descriptor) [pid 7301] close(14) = -1 EBADF (Bad file descriptor) [pid 7301] close(15) = -1 EBADF (Bad file descriptor) [pid 7301] close(16) = -1 EBADF (Bad file descriptor) [pid 7301] close(17) = -1 EBADF (Bad file descriptor) [pid 7301] close(18) = -1 EBADF (Bad file descriptor) [pid 7301] close(19) = -1 EBADF (Bad file descriptor) [pid 7301] close(20) = -1 EBADF (Bad file descriptor) [pid 7301] close(21) = -1 EBADF (Bad file descriptor) [pid 7301] close(22) = -1 EBADF (Bad file descriptor) [pid 7301] close(23) = -1 EBADF (Bad file descriptor) [pid 7301] close(24) = -1 EBADF (Bad file descriptor) [pid 7301] close(25) = -1 EBADF (Bad file descriptor) [pid 7301] close(26) = -1 EBADF (Bad file descriptor) [pid 7301] close(27) = -1 EBADF (Bad file descriptor) [pid 7301] close(28) = -1 EBADF (Bad file descriptor) [pid 7301] close(29) = -1 EBADF (Bad file descriptor) [pid 7301] exit_group(0 [pid 7302] <... futex resumed>) = ? [pid 7303] <... futex resumed>) = ? [pid 7301] <... exit_group resumed>) = ? [pid 7303] +++ exited with 0 +++ [pid 7302] +++ exited with 0 +++ [pid 7301] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2259, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./759", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./759", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./759/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./759/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./759/cgroup.cpu") = 0 [pid 5028] umount2("./759/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./759/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./759/binderfs") = 0 [pid 5028] umount2("./759/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./759/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./759/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./759/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./759/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./759/file0") = 0 [pid 5028] umount2("./759/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./759/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./759/cgroup") = 0 [pid 5028] umount2("./759/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./759/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./759/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./759") = 0 [pid 5028] mkdir("./760", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7304 attached , child_tidptr=0x5555563a5690) = 2262 [pid 7304] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7304] chdir("./760") = 0 [pid 7304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7304] setpgid(0, 0) = 0 [pid 7304] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7304] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7304] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7304] write(3, "1000", 4) = 4 [pid 7304] close(3) = 0 [pid 7304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7304] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7304] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7304] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7305 attached => {parent_tid=[2263]}, 88) = 2263 [pid 7304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7304] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7304] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7305] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7305] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7305] memfd_create("syzkaller", 0) = 3 [pid 7305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7305] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7305] munmap(0x7feef78ae000, 2097152) = 0 [pid 7305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7305] close(3) = 0 [pid 7305] mkdir("./file0", 0777) = 0 [pid 7305] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7305] chdir("./file0") = 0 [pid 7305] ioctl(4, LOOP_CLR_FD) = 0 [pid 7305] close(4) = 0 [pid 7305] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7304] <... futex resumed>) = 0 [pid 7305] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7304] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7304] <... futex resumed>) = 0 [pid 7304] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7305] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7305] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7304] <... futex resumed>) = 0 [pid 7305] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7304] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7304] <... futex resumed>) = 0 [pid 7305] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7304] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7305] <... openat resumed>) = 5 [pid 7305] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7305] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7304] <... futex resumed>) = 0 [pid 7304] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7305] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7304] <... futex resumed>) = 0 [ 240.444257][ T7305] loop0: detected capacity change from 0 to 4096 [ 240.466114][ T7305] ntfs: volume version 3.1. [pid 7304] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7304] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7304] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7304] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7306 attached => {parent_tid=[2264]}, 88) = 2264 [pid 7306] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7304] rt_sigprocmask(SIG_SETMASK, [], [pid 7306] set_robust_list(0x7feef7aad9a0, 24 [pid 7304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7306] <... set_robust_list resumed>) = 0 [pid 7304] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7304] <... futex resumed>) = 0 [pid 7306] ftruncate(4, 0 [pid 7304] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7306] <... ftruncate resumed>) = 0 [pid 7306] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] <... futex resumed>) = 0 [pid 7306] <... futex resumed>) = 1 [pid 7306] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7305] <... write resumed>) = 1048064 [pid 7305] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7304] close(3) = 0 [pid 7305] <... futex resumed>) = 0 [pid 7304] close(4 [pid 7305] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7304] <... close resumed>) = 0 [pid 7304] close(5) = 0 [pid 7304] close(6) = -1 EBADF (Bad file descriptor) [pid 7304] close(7) = -1 EBADF (Bad file descriptor) [pid 7304] close(8) = -1 EBADF (Bad file descriptor) [pid 7304] close(9) = -1 EBADF (Bad file descriptor) [pid 7304] close(10) = -1 EBADF (Bad file descriptor) [pid 7304] close(11) = -1 EBADF (Bad file descriptor) [pid 7304] close(12) = -1 EBADF (Bad file descriptor) [pid 7304] close(13) = -1 EBADF (Bad file descriptor) [pid 7304] close(14) = -1 EBADF (Bad file descriptor) [pid 7304] close(15) = -1 EBADF (Bad file descriptor) [pid 7304] close(16) = -1 EBADF (Bad file descriptor) [pid 7304] close(17) = -1 EBADF (Bad file descriptor) [pid 7304] close(18) = -1 EBADF (Bad file descriptor) [pid 7304] close(19) = -1 EBADF (Bad file descriptor) [pid 7304] close(20) = -1 EBADF (Bad file descriptor) [pid 7304] close(21) = -1 EBADF (Bad file descriptor) [pid 7304] close(22) = -1 EBADF (Bad file descriptor) [pid 7304] close(23) = -1 EBADF (Bad file descriptor) [pid 7304] close(24) = -1 EBADF (Bad file descriptor) [pid 7304] close(25) = -1 EBADF (Bad file descriptor) [pid 7304] close(26) = -1 EBADF (Bad file descriptor) [pid 7304] close(27) = -1 EBADF (Bad file descriptor) [pid 7304] close(28) = -1 EBADF (Bad file descriptor) [pid 7304] close(29) = -1 EBADF (Bad file descriptor) [pid 7304] exit_group(0) = ? [pid 7305] <... futex resumed>) = ? [pid 7306] <... futex resumed>) = ? [pid 7305] +++ exited with 0 +++ [pid 7306] +++ exited with 0 +++ [pid 7304] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2262, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./760", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./760", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./760/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./760/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./760/cgroup.cpu") = 0 [pid 5028] umount2("./760/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./760/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./760/binderfs") = 0 [pid 5028] umount2("./760/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./760/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./760/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./760/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./760/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./760/file0") = 0 [pid 5028] umount2("./760/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./760/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./760/cgroup") = 0 [pid 5028] umount2("./760/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./760/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./760/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./760") = 0 [pid 5028] mkdir("./761", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7307 attached , child_tidptr=0x5555563a5690) = 2265 [pid 7307] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7307] chdir("./761") = 0 [pid 7307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7307] setpgid(0, 0) = 0 [pid 7307] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7307] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7307] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7307] write(3, "1000", 4) = 4 [pid 7307] close(3) = 0 [pid 7307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7307] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7307] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7307] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7308 attached => {parent_tid=[2266]}, 88) = 2266 [pid 7307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7307] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7307] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7308] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7308] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7308] memfd_create("syzkaller", 0) = 3 [pid 7308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7308] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7308] munmap(0x7feef78ae000, 2097152) = 0 [pid 7308] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7308] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7308] close(3) = 0 [pid 7308] mkdir("./file0", 0777) = 0 [pid 7308] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7308] chdir("./file0") = 0 [pid 7308] ioctl(4, LOOP_CLR_FD) = 0 [pid 7308] close(4) = 0 [pid 7308] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7307] <... futex resumed>) = 0 [pid 7308] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7307] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7308] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7307] <... futex resumed>) = 0 [pid 7307] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7308] <... openat resumed>) = 4 [pid 7308] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7307] <... futex resumed>) = 0 [pid 7308] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7307] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7307] <... futex resumed>) = 0 [pid 7308] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7307] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7308] <... openat resumed>) = 5 [pid 7308] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7308] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7307] <... futex resumed>) = 0 [pid 7307] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7308] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7307] <... futex resumed>) = 0 [ 240.662694][ T7308] loop0: detected capacity change from 0 to 4096 [ 240.682991][ T7308] ntfs: volume version 3.1. [pid 7307] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7307] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7307] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7309 attached [pid 7309] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7307] <... clone3 resumed> => {parent_tid=[2267]}, 88) = 2267 [pid 7309] <... rseq resumed>) = 0 [pid 7307] rt_sigprocmask(SIG_SETMASK, [], [pid 7309] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7307] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] ftruncate(4, 0 [pid 7307] <... futex resumed>) = 0 [pid 7307] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7309] <... ftruncate resumed>) = 0 [pid 7308] <... write resumed>) = 1048064 [pid 7308] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7309] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7308] <... futex resumed>) = 0 [pid 7309] <... futex resumed>) = 1 [pid 7307] <... futex resumed>) = 0 [pid 7309] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7308] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7307] close(3) = 0 [pid 7307] close(4) = 0 [pid 7307] close(5) = 0 [pid 7307] close(6) = -1 EBADF (Bad file descriptor) [pid 7307] close(7) = -1 EBADF (Bad file descriptor) [pid 7307] close(8) = -1 EBADF (Bad file descriptor) [pid 7307] close(9) = -1 EBADF (Bad file descriptor) [pid 7307] close(10) = -1 EBADF (Bad file descriptor) [pid 7307] close(11) = -1 EBADF (Bad file descriptor) [pid 7307] close(12) = -1 EBADF (Bad file descriptor) [pid 7307] close(13) = -1 EBADF (Bad file descriptor) [pid 7307] close(14) = -1 EBADF (Bad file descriptor) [pid 7307] close(15) = -1 EBADF (Bad file descriptor) [pid 7307] close(16) = -1 EBADF (Bad file descriptor) [pid 7307] close(17) = -1 EBADF (Bad file descriptor) [pid 7307] close(18) = -1 EBADF (Bad file descriptor) [pid 7307] close(19) = -1 EBADF (Bad file descriptor) [pid 7307] close(20) = -1 EBADF (Bad file descriptor) [pid 7307] close(21) = -1 EBADF (Bad file descriptor) [pid 7307] close(22) = -1 EBADF (Bad file descriptor) [pid 7307] close(23) = -1 EBADF (Bad file descriptor) [pid 7307] close(24) = -1 EBADF (Bad file descriptor) [pid 7307] close(25) = -1 EBADF (Bad file descriptor) [pid 7307] close(26) = -1 EBADF (Bad file descriptor) [pid 7307] close(27) = -1 EBADF (Bad file descriptor) [pid 7307] close(28) = -1 EBADF (Bad file descriptor) [pid 7307] close(29) = -1 EBADF (Bad file descriptor) [pid 7307] exit_group(0 [pid 7309] <... futex resumed>) = ? [pid 7307] <... exit_group resumed>) = ? [pid 7308] <... futex resumed>) = ? [pid 7308] +++ exited with 0 +++ [pid 7309] +++ exited with 0 +++ [pid 7307] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2265, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./761", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./761", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./761/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./761/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./761/cgroup.cpu") = 0 [pid 5028] umount2("./761/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./761/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./761/binderfs") = 0 [pid 5028] umount2("./761/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./761/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./761/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./761/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./761/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./761/file0") = 0 [pid 5028] umount2("./761/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./761/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./761/cgroup") = 0 [pid 5028] umount2("./761/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./761/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./761/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./761") = 0 [pid 5028] mkdir("./762", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2268 ./strace-static-x86_64: Process 7310 attached [pid 7310] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7310] chdir("./762") = 0 [pid 7310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7310] setpgid(0, 0) = 0 [pid 7310] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7310] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7310] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7310] write(3, "1000", 4) = 4 [pid 7310] close(3) = 0 [pid 7310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7310] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7310] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7310] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7311 attached => {parent_tid=[2269]}, 88) = 2269 [pid 7311] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7311] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7311] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7310] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] <... futex resumed>) = 0 [pid 7310] <... futex resumed>) = 1 [pid 7310] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7311] memfd_create("syzkaller", 0) = 3 [pid 7311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7311] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7311] munmap(0x7feef78ae000, 2097152) = 0 [pid 7311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7311] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7311] close(3) = 0 [pid 7311] mkdir("./file0", 0777) = 0 [pid 7311] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7311] chdir("./file0") = 0 [pid 7311] ioctl(4, LOOP_CLR_FD) = 0 [pid 7311] close(4) = 0 [pid 7311] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7310] <... futex resumed>) = 0 [pid 7311] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7310] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7310] <... futex resumed>) = 0 [pid 7310] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7311] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7311] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7311] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7310] <... futex resumed>) = 0 [pid 7310] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7311] <... futex resumed>) = 0 [pid 7310] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7311] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7311] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7310] <... futex resumed>) = 0 [pid 7310] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7311] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7310] <... futex resumed>) = 0 [ 240.889247][ T7311] loop0: detected capacity change from 0 to 4096 [ 240.909792][ T7311] ntfs: volume version 3.1. [pid 7310] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7310] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7310] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7312 attached [pid 7312] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7310] <... clone3 resumed> => {parent_tid=[2270]}, 88) = 2270 [pid 7310] rt_sigprocmask(SIG_SETMASK, [], [pid 7312] <... rseq resumed>) = 0 [pid 7310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7312] set_robust_list(0x7feef7aad9a0, 24 [pid 7310] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7312] <... set_robust_list resumed>) = 0 [pid 7310] <... futex resumed>) = 0 [pid 7312] rt_sigprocmask(SIG_SETMASK, [], [pid 7310] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7312] ftruncate(4, 0) = 0 [pid 7312] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7310] <... futex resumed>) = 0 [pid 7312] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7311] <... write resumed>) = 1048064 [pid 7311] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7311] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7310] close(3) = 0 [pid 7310] close(4) = 0 [pid 7310] close(5) = 0 [pid 7310] close(6) = -1 EBADF (Bad file descriptor) [pid 7310] close(7) = -1 EBADF (Bad file descriptor) [pid 7310] close(8) = -1 EBADF (Bad file descriptor) [pid 7310] close(9) = -1 EBADF (Bad file descriptor) [pid 7310] close(10) = -1 EBADF (Bad file descriptor) [pid 7310] close(11) = -1 EBADF (Bad file descriptor) [pid 7310] close(12) = -1 EBADF (Bad file descriptor) [pid 7310] close(13) = -1 EBADF (Bad file descriptor) [pid 7310] close(14) = -1 EBADF (Bad file descriptor) [pid 7310] close(15) = -1 EBADF (Bad file descriptor) [pid 7310] close(16) = -1 EBADF (Bad file descriptor) [pid 7310] close(17) = -1 EBADF (Bad file descriptor) [pid 7310] close(18) = -1 EBADF (Bad file descriptor) [pid 7310] close(19) = -1 EBADF (Bad file descriptor) [pid 7310] close(20) = -1 EBADF (Bad file descriptor) [pid 7310] close(21) = -1 EBADF (Bad file descriptor) [pid 7310] close(22) = -1 EBADF (Bad file descriptor) [pid 7310] close(23) = -1 EBADF (Bad file descriptor) [pid 7310] close(24) = -1 EBADF (Bad file descriptor) [pid 7310] close(25) = -1 EBADF (Bad file descriptor) [pid 7310] close(26) = -1 EBADF (Bad file descriptor) [pid 7310] close(27) = -1 EBADF (Bad file descriptor) [pid 7310] close(28) = -1 EBADF (Bad file descriptor) [pid 7310] close(29) = -1 EBADF (Bad file descriptor) [pid 7310] exit_group(0) = ? [pid 7311] <... futex resumed>) = ? [pid 7312] <... futex resumed>) = ? [pid 7312] +++ exited with 0 +++ [pid 7311] +++ exited with 0 +++ [pid 7310] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2268, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./762", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./762", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./762/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./762/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./762/cgroup.cpu") = 0 [pid 5028] umount2("./762/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./762/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./762/binderfs") = 0 [pid 5028] umount2("./762/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./762/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./762/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./762/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./762/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./762/file0") = 0 [pid 5028] umount2("./762/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./762/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./762/cgroup") = 0 [pid 5028] umount2("./762/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./762/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./762/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./762") = 0 [pid 5028] mkdir("./763", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7313 attached [pid 7313] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7313] chdir("./763") = 0 [pid 7313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7313] setpgid(0, 0) = 0 [pid 7313] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2271 [pid 7313] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7313] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7313] write(3, "1000", 4) = 4 [pid 7313] close(3) = 0 [pid 7313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7313] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7313] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7313] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7314 attached [pid 7314] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7313] <... clone3 resumed> => {parent_tid=[2272]}, 88) = 2272 [pid 7314] <... rseq resumed>) = 0 [pid 7313] rt_sigprocmask(SIG_SETMASK, [], [pid 7314] set_robust_list(0x7feeffcce9a0, 24 [pid 7313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7314] <... set_robust_list resumed>) = 0 [pid 7313] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7314] rt_sigprocmask(SIG_SETMASK, [], [pid 7313] <... futex resumed>) = 0 [pid 7314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7313] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7314] memfd_create("syzkaller", 0) = 3 [pid 7314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7314] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7314] munmap(0x7feef78ae000, 2097152) = 0 [pid 7314] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7314] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7314] close(3) = 0 [pid 7314] mkdir("./file0", 0777) = 0 [pid 7314] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7314] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7314] chdir("./file0") = 0 [pid 7314] ioctl(4, LOOP_CLR_FD) = 0 [pid 7314] close(4) = 0 [pid 7314] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... futex resumed>) = 0 [pid 7314] <... futex resumed>) = 1 [pid 7313] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7314] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7313] <... futex resumed>) = 0 [pid 7313] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7314] <... openat resumed>) = 4 [pid 7314] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... futex resumed>) = 0 [pid 7314] <... futex resumed>) = 1 [pid 7313] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7314] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7313] <... futex resumed>) = 0 [pid 7314] <... openat resumed>) = 5 [pid 7313] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7314] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... futex resumed>) = 0 [pid 7313] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7314] <... futex resumed>) = 1 [pid 7313] <... futex resumed>) = 0 [pid 7314] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 241.098316][ T7314] loop0: detected capacity change from 0 to 4096 [ 241.120602][ T7314] ntfs: volume version 3.1. [pid 7313] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7313] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7313] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7315 attached [pid 7315] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7313] <... clone3 resumed> => {parent_tid=[2273]}, 88) = 2273 [pid 7315] <... rseq resumed>) = 0 [pid 7313] rt_sigprocmask(SIG_SETMASK, [], [pid 7315] set_robust_list(0x7feef7aad9a0, 24 [pid 7313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7315] <... set_robust_list resumed>) = 0 [pid 7313] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7315] rt_sigprocmask(SIG_SETMASK, [], [pid 7313] <... futex resumed>) = 0 [pid 7315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7313] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7315] ftruncate(4, 0) = 0 [pid 7315] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7314] <... write resumed>) = 1048064 [pid 7315] <... futex resumed>) = 1 [pid 7314] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7313] <... futex resumed>) = 0 [pid 7315] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7314] <... futex resumed>) = 0 [pid 7313] close(3 [pid 7314] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7313] <... close resumed>) = 0 [pid 7313] close(4) = 0 [pid 7313] close(5) = 0 [pid 7313] close(6) = -1 EBADF (Bad file descriptor) [pid 7313] close(7) = -1 EBADF (Bad file descriptor) [pid 7313] close(8) = -1 EBADF (Bad file descriptor) [pid 7313] close(9) = -1 EBADF (Bad file descriptor) [pid 7313] close(10) = -1 EBADF (Bad file descriptor) [pid 7313] close(11) = -1 EBADF (Bad file descriptor) [pid 7313] close(12) = -1 EBADF (Bad file descriptor) [pid 7313] close(13) = -1 EBADF (Bad file descriptor) [pid 7313] close(14) = -1 EBADF (Bad file descriptor) [pid 7313] close(15) = -1 EBADF (Bad file descriptor) [pid 7313] close(16) = -1 EBADF (Bad file descriptor) [pid 7313] close(17) = -1 EBADF (Bad file descriptor) [pid 7313] close(18) = -1 EBADF (Bad file descriptor) [pid 7313] close(19) = -1 EBADF (Bad file descriptor) [pid 7313] close(20) = -1 EBADF (Bad file descriptor) [pid 7313] close(21) = -1 EBADF (Bad file descriptor) [pid 7313] close(22) = -1 EBADF (Bad file descriptor) [pid 7313] close(23) = -1 EBADF (Bad file descriptor) [pid 7313] close(24) = -1 EBADF (Bad file descriptor) [pid 7313] close(25) = -1 EBADF (Bad file descriptor) [pid 7313] close(26) = -1 EBADF (Bad file descriptor) [pid 7313] close(27) = -1 EBADF (Bad file descriptor) [pid 7313] close(28) = -1 EBADF (Bad file descriptor) [pid 7313] close(29) = -1 EBADF (Bad file descriptor) [pid 7313] exit_group(0 [pid 7314] <... futex resumed>) = ? [pid 7313] <... exit_group resumed>) = ? [pid 7315] <... futex resumed>) = ? [pid 7314] +++ exited with 0 +++ [pid 7315] +++ exited with 0 +++ [pid 7313] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2271, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./763", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./763", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./763/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./763/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./763/cgroup.cpu") = 0 [pid 5028] umount2("./763/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./763/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./763/binderfs") = 0 [pid 5028] umount2("./763/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./763/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./763/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./763/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./763/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./763/file0") = 0 [pid 5028] umount2("./763/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./763/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./763/cgroup") = 0 [pid 5028] umount2("./763/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./763/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./763/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./763") = 0 [pid 5028] mkdir("./764", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7316 attached , child_tidptr=0x5555563a5690) = 2274 [pid 7316] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7316] chdir("./764") = 0 [pid 7316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7316] setpgid(0, 0) = 0 [pid 7316] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7316] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7316] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7316] write(3, "1000", 4) = 4 [pid 7316] close(3) = 0 [pid 7316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7316] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7316] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7316] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7317 attached [pid 7317] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7316] <... clone3 resumed> => {parent_tid=[2275]}, 88) = 2275 [pid 7317] <... rseq resumed>) = 0 [pid 7316] rt_sigprocmask(SIG_SETMASK, [], [pid 7317] set_robust_list(0x7feeffcce9a0, 24 [pid 7316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7317] <... set_robust_list resumed>) = 0 [pid 7316] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7316] <... futex resumed>) = 0 [pid 7316] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7317] memfd_create("syzkaller", 0) = 3 [pid 7317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7317] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7317] munmap(0x7feef78ae000, 2097152) = 0 [pid 7317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7317] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7317] close(3) = 0 [pid 7317] mkdir("./file0", 0777) = 0 [pid 7317] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7317] chdir("./file0") = 0 [pid 7317] ioctl(4, LOOP_CLR_FD) = 0 [pid 7317] close(4) = 0 [pid 7317] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7316] <... futex resumed>) = 0 [pid 7317] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7316] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7316] <... futex resumed>) = 0 [pid 7317] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7316] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7317] <... openat resumed>) = 4 [pid 7317] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7316] <... futex resumed>) = 0 [pid 7316] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7317] <... futex resumed>) = 1 [pid 7316] <... futex resumed>) = 0 [pid 7317] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7316] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7317] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7317] <... futex resumed>) = 0 [pid 7316] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7317] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7316] <... futex resumed>) = 0 [ 241.313162][ T7317] loop0: detected capacity change from 0 to 4096 [ 241.334543][ T7317] ntfs: volume version 3.1. [pid 7316] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7316] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7316] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7316] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7316] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2276]}, 88) = 2276 [pid 7316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7316] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7316] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7318 attached [pid 7318] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7318] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7318] ftruncate(4, 0) = 0 [pid 7318] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7316] <... futex resumed>) = 0 [pid 7318] <... futex resumed>) = 1 [pid 7318] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7317] <... write resumed>) = 1048064 [pid 7317] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7317] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7316] close(3) = 0 [pid 7316] close(4) = 0 [pid 7316] close(5) = 0 [pid 7316] close(6) = -1 EBADF (Bad file descriptor) [pid 7316] close(7) = -1 EBADF (Bad file descriptor) [pid 7316] close(8) = -1 EBADF (Bad file descriptor) [pid 7316] close(9) = -1 EBADF (Bad file descriptor) [pid 7316] close(10) = -1 EBADF (Bad file descriptor) [pid 7316] close(11) = -1 EBADF (Bad file descriptor) [pid 7316] close(12) = -1 EBADF (Bad file descriptor) [pid 7316] close(13) = -1 EBADF (Bad file descriptor) [pid 7316] close(14) = -1 EBADF (Bad file descriptor) [pid 7316] close(15) = -1 EBADF (Bad file descriptor) [pid 7316] close(16) = -1 EBADF (Bad file descriptor) [pid 7316] close(17) = -1 EBADF (Bad file descriptor) [pid 7316] close(18) = -1 EBADF (Bad file descriptor) [pid 7316] close(19) = -1 EBADF (Bad file descriptor) [pid 7316] close(20) = -1 EBADF (Bad file descriptor) [pid 7316] close(21) = -1 EBADF (Bad file descriptor) [pid 7316] close(22) = -1 EBADF (Bad file descriptor) [pid 7316] close(23) = -1 EBADF (Bad file descriptor) [pid 7316] close(24) = -1 EBADF (Bad file descriptor) [pid 7316] close(25) = -1 EBADF (Bad file descriptor) [pid 7316] close(26) = -1 EBADF (Bad file descriptor) [pid 7316] close(27) = -1 EBADF (Bad file descriptor) [pid 7316] close(28) = -1 EBADF (Bad file descriptor) [pid 7316] close(29) = -1 EBADF (Bad file descriptor) [pid 7316] exit_group(0 [pid 7317] <... futex resumed>) = ? [pid 7318] <... futex resumed>) = ? [pid 7317] +++ exited with 0 +++ [pid 7316] <... exit_group resumed>) = ? [pid 7318] +++ exited with 0 +++ [pid 7316] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2274, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./764", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./764", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./764/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./764/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./764/cgroup.cpu") = 0 [pid 5028] umount2("./764/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./764/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./764/binderfs") = 0 [pid 5028] umount2("./764/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./764/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./764/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./764/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./764/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./764/file0") = 0 [pid 5028] umount2("./764/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./764/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./764/cgroup") = 0 [pid 5028] umount2("./764/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./764/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./764/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./764") = 0 [pid 5028] mkdir("./765", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7319 attached [pid 7319] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2277 [pid 7319] <... set_robust_list resumed>) = 0 [pid 7319] chdir("./765") = 0 [pid 7319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7319] setpgid(0, 0) = 0 [pid 7319] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7319] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7319] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7319] write(3, "1000", 4) = 4 [pid 7319] close(3) = 0 [pid 7319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7319] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7319] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7319] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7320 attached [pid 7320] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7319] <... clone3 resumed> => {parent_tid=[2278]}, 88) = 2278 [pid 7320] <... rseq resumed>) = 0 [pid 7319] rt_sigprocmask(SIG_SETMASK, [], [pid 7320] set_robust_list(0x7feeffcce9a0, 24 [pid 7319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7320] <... set_robust_list resumed>) = 0 [pid 7319] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7320] rt_sigprocmask(SIG_SETMASK, [], [pid 7319] <... futex resumed>) = 0 [pid 7320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7319] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7320] memfd_create("syzkaller", 0) = 3 [pid 7320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7320] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7320] munmap(0x7feef78ae000, 2097152) = 0 [pid 7320] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7320] close(3) = 0 [pid 7320] mkdir("./file0", 0777) = 0 [pid 7320] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7320] chdir("./file0") = 0 [pid 7320] ioctl(4, LOOP_CLR_FD) = 0 [pid 7320] close(4) = 0 [pid 7320] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7319] <... futex resumed>) = 0 [pid 7320] <... futex resumed>) = 1 [pid 7319] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7320] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7319] <... futex resumed>) = 0 [pid 7319] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7320] <... openat resumed>) = 4 [pid 7320] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7319] <... futex resumed>) = 0 [pid 7320] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7319] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7319] <... futex resumed>) = 0 [pid 7319] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7320] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7320] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7319] <... futex resumed>) = 0 [pid 7320] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7319] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7320] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7319] <... futex resumed>) = 0 [ 241.519143][ T7320] loop0: detected capacity change from 0 to 4096 [ 241.541607][ T7320] ntfs: volume version 3.1. [pid 7319] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7319] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7319] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7319] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7321 attached => {parent_tid=[2279]}, 88) = 2279 [pid 7321] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7319] rt_sigprocmask(SIG_SETMASK, [], [pid 7321] <... rseq resumed>) = 0 [pid 7321] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7321] rt_sigprocmask(SIG_SETMASK, [], [pid 7319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7319] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7321] ftruncate(4, 0 [pid 7319] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7321] <... ftruncate resumed>) = 0 [pid 7320] <... write resumed>) = 1048064 [pid 7321] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7320] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7319] <... futex resumed>) = 0 [pid 7321] <... futex resumed>) = 1 [pid 7320] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7319] close(3 [pid 7321] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7319] <... close resumed>) = 0 [pid 7319] close(4) = 0 [pid 7319] close(5) = 0 [pid 7319] close(6) = -1 EBADF (Bad file descriptor) [pid 7319] close(7) = -1 EBADF (Bad file descriptor) [pid 7319] close(8) = -1 EBADF (Bad file descriptor) [pid 7319] close(9) = -1 EBADF (Bad file descriptor) [pid 7319] close(10) = -1 EBADF (Bad file descriptor) [pid 7319] close(11) = -1 EBADF (Bad file descriptor) [pid 7319] close(12) = -1 EBADF (Bad file descriptor) [pid 7319] close(13) = -1 EBADF (Bad file descriptor) [pid 7319] close(14) = -1 EBADF (Bad file descriptor) [pid 7319] close(15) = -1 EBADF (Bad file descriptor) [pid 7319] close(16) = -1 EBADF (Bad file descriptor) [pid 7319] close(17) = -1 EBADF (Bad file descriptor) [pid 7319] close(18) = -1 EBADF (Bad file descriptor) [pid 7319] close(19) = -1 EBADF (Bad file descriptor) [pid 7319] close(20) = -1 EBADF (Bad file descriptor) [pid 7319] close(21) = -1 EBADF (Bad file descriptor) [pid 7319] close(22) = -1 EBADF (Bad file descriptor) [pid 7319] close(23) = -1 EBADF (Bad file descriptor) [pid 7319] close(24) = -1 EBADF (Bad file descriptor) [pid 7319] close(25) = -1 EBADF (Bad file descriptor) [pid 7319] close(26) = -1 EBADF (Bad file descriptor) [pid 7319] close(27) = -1 EBADF (Bad file descriptor) [pid 7319] close(28) = -1 EBADF (Bad file descriptor) [pid 7319] close(29) = -1 EBADF (Bad file descriptor) [pid 7319] exit_group(0 [pid 7320] <... futex resumed>) = ? [pid 7319] <... exit_group resumed>) = ? [pid 7321] <... futex resumed>) = ? [pid 7320] +++ exited with 0 +++ [pid 7321] +++ exited with 0 +++ [pid 7319] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2277, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./765", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./765", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./765/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./765/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./765/cgroup.cpu") = 0 [pid 5028] umount2("./765/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./765/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./765/binderfs") = 0 [pid 5028] umount2("./765/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./765/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./765/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./765/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./765/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./765/file0") = 0 [pid 5028] umount2("./765/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./765/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./765/cgroup") = 0 [pid 5028] umount2("./765/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./765/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./765/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./765") = 0 [pid 5028] mkdir("./766", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7322 attached , child_tidptr=0x5555563a5690) = 2280 [pid 7322] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7322] chdir("./766") = 0 [pid 7322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7322] setpgid(0, 0) = 0 [pid 7322] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7322] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7322] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7322] write(3, "1000", 4) = 4 [pid 7322] close(3) = 0 [pid 7322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7322] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7322] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7322] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7322] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7322] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2281]}, 88) = 2281 [pid 7322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7322] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7322] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7323 attached [pid 7323] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7323] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7323] memfd_create("syzkaller", 0) = 3 [pid 7323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7323] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7323] munmap(0x7feef78ae000, 2097152) = 0 [pid 7323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7323] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7323] close(3) = 0 [pid 7323] mkdir("./file0", 0777) = 0 [ 241.735830][ T7323] loop0: detected capacity change from 0 to 4096 [ 241.745169][ T7323] __ntfs_warning: 13 callbacks suppressed [ 241.745178][ T7323] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7323] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7323] chdir("./file0") = 0 [pid 7323] ioctl(4, LOOP_CLR_FD) = 0 [pid 7323] close(4) = 0 [pid 7323] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7322] <... futex resumed>) = 0 [pid 7323] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7322] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7322] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7323] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7323] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7323] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7322] <... futex resumed>) = 0 [pid 7322] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... futex resumed>) = 0 [pid 7322] <... futex resumed>) = 1 [pid 7323] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7322] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7323] <... openat resumed>) = 5 [pid 7323] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7322] <... futex resumed>) = 0 [pid 7323] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7322] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7322] <... futex resumed>) = 0 [pid 7323] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 241.783163][ T7323] ntfs: volume version 3.1. [pid 7322] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7322] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7322] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7322] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7324 attached [pid 7324] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7324] set_robust_list(0x7feef7aad9a0, 24 [pid 7322] <... clone3 resumed> => {parent_tid=[2282]}, 88) = 2282 [pid 7322] rt_sigprocmask(SIG_SETMASK, [], [pid 7324] <... set_robust_list resumed>) = 0 [pid 7322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7324] rt_sigprocmask(SIG_SETMASK, [], [pid 7322] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7322] <... futex resumed>) = 0 [pid 7324] ftruncate(4, 0 [pid 7322] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7324] <... ftruncate resumed>) = 0 [pid 7324] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7323] <... write resumed>) = 1048064 [pid 7322] <... futex resumed>) = 0 [pid 7324] <... futex resumed>) = 1 [pid 7323] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7324] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7323] <... futex resumed>) = 0 [pid 7323] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7322] close(3) = 0 [pid 7322] close(4) = 0 [pid 7322] close(5) = 0 [pid 7322] close(6) = -1 EBADF (Bad file descriptor) [pid 7322] close(7) = -1 EBADF (Bad file descriptor) [pid 7322] close(8) = -1 EBADF (Bad file descriptor) [pid 7322] close(9) = -1 EBADF (Bad file descriptor) [pid 7322] close(10) = -1 EBADF (Bad file descriptor) [pid 7322] close(11) = -1 EBADF (Bad file descriptor) [pid 7322] close(12) = -1 EBADF (Bad file descriptor) [pid 7322] close(13) = -1 EBADF (Bad file descriptor) [pid 7322] close(14) = -1 EBADF (Bad file descriptor) [pid 7322] close(15) = -1 EBADF (Bad file descriptor) [pid 7322] close(16) = -1 EBADF (Bad file descriptor) [pid 7322] close(17) = -1 EBADF (Bad file descriptor) [pid 7322] close(18) = -1 EBADF (Bad file descriptor) [pid 7322] close(19) = -1 EBADF (Bad file descriptor) [pid 7322] close(20) = -1 EBADF (Bad file descriptor) [pid 7322] close(21) = -1 EBADF (Bad file descriptor) [pid 7322] close(22) = -1 EBADF (Bad file descriptor) [pid 7322] close(23) = -1 EBADF (Bad file descriptor) [pid 7322] close(24) = -1 EBADF (Bad file descriptor) [pid 7322] close(25) = -1 EBADF (Bad file descriptor) [pid 7322] close(26) = -1 EBADF (Bad file descriptor) [pid 7322] close(27) = -1 EBADF (Bad file descriptor) [pid 7322] close(28) = -1 EBADF (Bad file descriptor) [pid 7322] close(29) = -1 EBADF (Bad file descriptor) [pid 7322] exit_group(0 [pid 7323] <... futex resumed>) = ? [pid 7322] <... exit_group resumed>) = ? [pid 7324] <... futex resumed>) = ? [pid 7323] +++ exited with 0 +++ [pid 7324] +++ exited with 0 +++ [pid 7322] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2280, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./766", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./766", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./766/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./766/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./766/cgroup.cpu") = 0 [pid 5028] umount2("./766/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./766/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./766/binderfs") = 0 [pid 5028] umount2("./766/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./766/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./766/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./766/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./766/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./766/file0") = 0 [pid 5028] umount2("./766/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./766/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./766/cgroup") = 0 [pid 5028] umount2("./766/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./766/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./766/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./766") = 0 [pid 5028] mkdir("./767", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7325 attached , child_tidptr=0x5555563a5690) = 2283 [pid 7325] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7325] chdir("./767") = 0 [pid 7325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7325] setpgid(0, 0) = 0 [pid 7325] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7325] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7325] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7325] write(3, "1000", 4) = 4 [pid 7325] close(3) = 0 [pid 7325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7325] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7325] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7325] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2284]}, 88) = 2284 [pid 7325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7325] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7325] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7326 attached [pid 7326] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7326] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7326] memfd_create("syzkaller", 0) = 3 [pid 7326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7326] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7326] munmap(0x7feef78ae000, 2097152) = 0 [pid 7326] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7326] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7326] close(3) = 0 [pid 7326] mkdir("./file0", 0777) = 0 [pid 7326] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7326] chdir("./file0") = 0 [pid 7326] ioctl(4, LOOP_CLR_FD) = 0 [pid 7326] close(4) = 0 [pid 7326] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7325] <... futex resumed>) = 0 [pid 7325] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7325] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7326] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7326] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7325] <... futex resumed>) = 0 [pid 7325] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7326] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7325] <... futex resumed>) = 0 [pid 7326] <... openat resumed>) = 5 [pid 7325] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7326] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7325] <... futex resumed>) = 0 [pid 7326] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7325] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 241.999621][ T7326] loop0: detected capacity change from 0 to 4096 [ 242.009255][ T7326] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.041102][ T7326] ntfs: volume version 3.1. [pid 7326] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7325] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7325] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7327 attached => {parent_tid=[2285]}, 88) = 2285 [pid 7327] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7325] rt_sigprocmask(SIG_SETMASK, [], [pid 7327] <... rseq resumed>) = 0 [pid 7325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7327] set_robust_list(0x7feef7aad9a0, 24 [pid 7325] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] <... set_robust_list resumed>) = 0 [pid 7327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7325] <... futex resumed>) = 0 [pid 7327] ftruncate(4, 0 [pid 7325] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7327] <... ftruncate resumed>) = 0 [pid 7326] <... write resumed>) = 1048064 [pid 7326] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7327] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7325] <... futex resumed>) = 0 [pid 7327] <... futex resumed>) = 1 [pid 7326] <... futex resumed>) = 0 [pid 7325] close(3 [pid 7326] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] <... close resumed>) = 0 [pid 7327] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7325] close(4) = 0 [pid 7325] close(5) = 0 [pid 7325] close(6) = -1 EBADF (Bad file descriptor) [pid 7325] close(7) = -1 EBADF (Bad file descriptor) [pid 7325] close(8) = -1 EBADF (Bad file descriptor) [pid 7325] close(9) = -1 EBADF (Bad file descriptor) [pid 7325] close(10) = -1 EBADF (Bad file descriptor) [pid 7325] close(11) = -1 EBADF (Bad file descriptor) [pid 7325] close(12) = -1 EBADF (Bad file descriptor) [pid 7325] close(13) = -1 EBADF (Bad file descriptor) [pid 7325] close(14) = -1 EBADF (Bad file descriptor) [pid 7325] close(15) = -1 EBADF (Bad file descriptor) [pid 7325] close(16) = -1 EBADF (Bad file descriptor) [pid 7325] close(17) = -1 EBADF (Bad file descriptor) [pid 7325] close(18) = -1 EBADF (Bad file descriptor) [pid 7325] close(19) = -1 EBADF (Bad file descriptor) [pid 7325] close(20) = -1 EBADF (Bad file descriptor) [pid 7325] close(21) = -1 EBADF (Bad file descriptor) [pid 7325] close(22) = -1 EBADF (Bad file descriptor) [pid 7325] close(23) = -1 EBADF (Bad file descriptor) [pid 7325] close(24) = -1 EBADF (Bad file descriptor) [pid 7325] close(25) = -1 EBADF (Bad file descriptor) [pid 7325] close(26) = -1 EBADF (Bad file descriptor) [pid 7325] close(27) = -1 EBADF (Bad file descriptor) [pid 7325] close(28) = -1 EBADF (Bad file descriptor) [pid 7325] close(29) = -1 EBADF (Bad file descriptor) [pid 7325] exit_group(0 [pid 7326] <... futex resumed>) = ? [pid 7325] <... exit_group resumed>) = ? [pid 7327] <... futex resumed>) = ? [pid 7326] +++ exited with 0 +++ [pid 7327] +++ exited with 0 +++ [pid 7325] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2283, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./767", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./767", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./767/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./767/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./767/cgroup.cpu") = 0 [pid 5028] umount2("./767/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./767/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./767/binderfs") = 0 [pid 5028] umount2("./767/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./767/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./767/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./767/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./767/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./767/file0") = 0 [pid 5028] umount2("./767/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./767/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./767/cgroup") = 0 [pid 5028] umount2("./767/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./767/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./767/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./767") = 0 [pid 5028] mkdir("./768", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7328 attached , child_tidptr=0x5555563a5690) = 2286 [pid 7328] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7328] chdir("./768") = 0 [pid 7328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7328] setpgid(0, 0) = 0 [pid 7328] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7328] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7328] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7328] write(3, "1000", 4) = 4 [pid 7328] close(3) = 0 [pid 7328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7328] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7328] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7328] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7329 attached => {parent_tid=[2287]}, 88) = 2287 [pid 7328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7328] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7328] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7329] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7329] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7329] memfd_create("syzkaller", 0) = 3 [pid 7329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7329] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7329] munmap(0x7feef78ae000, 2097152) = 0 [pid 7329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7329] close(3) = 0 [pid 7329] mkdir("./file0", 0777) = 0 [pid 7329] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7329] chdir("./file0") = 0 [pid 7329] ioctl(4, LOOP_CLR_FD) = 0 [pid 7329] close(4) = 0 [pid 7329] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7328] <... futex resumed>) = 0 [pid 7328] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7329] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7328] <... futex resumed>) = 0 [pid 7328] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7329] <... openat resumed>) = 4 [pid 7329] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7329] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7328] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7328] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7329] <... futex resumed>) = 0 [pid 7329] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7328] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7329] <... openat resumed>) = 5 [pid 7329] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7328] <... futex resumed>) = 0 [pid 7329] <... futex resumed>) = 1 [pid 7328] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7329] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7328] <... futex resumed>) = 0 [ 242.249243][ T7329] loop0: detected capacity change from 0 to 4096 [ 242.258867][ T7329] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.293438][ T7329] ntfs: volume version 3.1. [pid 7328] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7328] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7328] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7330 attached [pid 7330] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7330] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7330] rt_sigprocmask(SIG_SETMASK, [], [pid 7328] <... clone3 resumed> => {parent_tid=[2288]}, 88) = 2288 [pid 7330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7328] rt_sigprocmask(SIG_SETMASK, [], [pid 7330] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7328] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7330] <... futex resumed>) = 0 [pid 7328] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7330] ftruncate(4, 0) = 0 [pid 7330] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7329] <... write resumed>) = 1048064 [pid 7329] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7329] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7330] <... futex resumed>) = 1 [pid 7328] <... futex resumed>) = 0 [pid 7330] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7328] close(3) = 0 [pid 7328] close(4) = 0 [pid 7328] close(5) = 0 [pid 7328] close(6) = -1 EBADF (Bad file descriptor) [pid 7328] close(7) = -1 EBADF (Bad file descriptor) [pid 7328] close(8) = -1 EBADF (Bad file descriptor) [pid 7328] close(9) = -1 EBADF (Bad file descriptor) [pid 7328] close(10) = -1 EBADF (Bad file descriptor) [pid 7328] close(11) = -1 EBADF (Bad file descriptor) [pid 7328] close(12) = -1 EBADF (Bad file descriptor) [pid 7328] close(13) = -1 EBADF (Bad file descriptor) [pid 7328] close(14) = -1 EBADF (Bad file descriptor) [pid 7328] close(15) = -1 EBADF (Bad file descriptor) [pid 7328] close(16) = -1 EBADF (Bad file descriptor) [pid 7328] close(17) = -1 EBADF (Bad file descriptor) [pid 7328] close(18) = -1 EBADF (Bad file descriptor) [pid 7328] close(19) = -1 EBADF (Bad file descriptor) [pid 7328] close(20) = -1 EBADF (Bad file descriptor) [pid 7328] close(21) = -1 EBADF (Bad file descriptor) [pid 7328] close(22) = -1 EBADF (Bad file descriptor) [pid 7328] close(23) = -1 EBADF (Bad file descriptor) [pid 7328] close(24) = -1 EBADF (Bad file descriptor) [pid 7328] close(25) = -1 EBADF (Bad file descriptor) [pid 7328] close(26) = -1 EBADF (Bad file descriptor) [pid 7328] close(27) = -1 EBADF (Bad file descriptor) [pid 7328] close(28) = -1 EBADF (Bad file descriptor) [pid 7328] close(29) = -1 EBADF (Bad file descriptor) [pid 7328] exit_group(0) = ? [pid 7329] <... futex resumed>) = ? [pid 7330] <... futex resumed>) = ? [pid 7329] +++ exited with 0 +++ [pid 7330] +++ exited with 0 +++ [pid 7328] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2286, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./768", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./768", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./768/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./768/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./768/cgroup.cpu") = 0 [pid 5028] umount2("./768/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./768/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./768/binderfs") = 0 [pid 5028] umount2("./768/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./768/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./768/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./768/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./768/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./768/file0") = 0 [pid 5028] umount2("./768/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./768/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./768/cgroup") = 0 [pid 5028] umount2("./768/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./768/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./768/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./768") = 0 [pid 5028] mkdir("./769", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7331 attached [pid 7331] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2289 [pid 7331] <... set_robust_list resumed>) = 0 [pid 7331] chdir("./769") = 0 [pid 7331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7331] setpgid(0, 0) = 0 [pid 7331] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7331] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7331] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7331] write(3, "1000", 4) = 4 [pid 7331] close(3) = 0 [pid 7331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7331] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7331] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2290]}, 88) = 2290 [pid 7331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7331] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7332 attached [pid 7332] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7332] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7332] memfd_create("syzkaller", 0) = 3 [pid 7332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7332] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7332] munmap(0x7feef78ae000, 2097152) = 0 [pid 7332] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7332] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7332] close(3) = 0 [pid 7332] mkdir("./file0", 0777) = 0 [pid 7332] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7332] chdir("./file0") = 0 [pid 7332] ioctl(4, LOOP_CLR_FD) = 0 [pid 7332] close(4) = 0 [pid 7332] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7331] <... futex resumed>) = 0 [pid 7331] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7332] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7331] <... futex resumed>) = 0 [pid 7332] <... openat resumed>) = 4 [pid 7331] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7332] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7332] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] <... futex resumed>) = 0 [pid 7331] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7332] <... futex resumed>) = 0 [pid 7331] <... futex resumed>) = 1 [pid 7332] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7331] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7332] <... openat resumed>) = 5 [pid 7332] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7331] <... futex resumed>) = 0 [pid 7332] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7331] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7332] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7331] <... futex resumed>) = 0 [ 242.500668][ T7332] loop0: detected capacity change from 0 to 4096 [ 242.510292][ T7332] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.541431][ T7332] ntfs: volume version 3.1. [pid 7331] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7331] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7331] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7333 attached [pid 7333] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7333] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7333] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] <... clone3 resumed> => {parent_tid=[2291]}, 88) = 2291 [pid 7331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7331] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7333] <... futex resumed>) = 0 [pid 7331] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7333] ftruncate(4, 0) = 0 [pid 7332] <... write resumed>) = 1048064 [pid 7332] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7332] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7333] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7333] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7331] <... futex resumed>) = 0 [pid 7331] close(3) = 0 [pid 7331] close(4) = 0 [pid 7331] close(5) = 0 [pid 7331] close(6) = -1 EBADF (Bad file descriptor) [pid 7331] close(7) = -1 EBADF (Bad file descriptor) [pid 7331] close(8) = -1 EBADF (Bad file descriptor) [pid 7331] close(9) = -1 EBADF (Bad file descriptor) [pid 7331] close(10) = -1 EBADF (Bad file descriptor) [pid 7331] close(11) = -1 EBADF (Bad file descriptor) [pid 7331] close(12) = -1 EBADF (Bad file descriptor) [pid 7331] close(13) = -1 EBADF (Bad file descriptor) [pid 7331] close(14) = -1 EBADF (Bad file descriptor) [pid 7331] close(15) = -1 EBADF (Bad file descriptor) [pid 7331] close(16) = -1 EBADF (Bad file descriptor) [pid 7331] close(17) = -1 EBADF (Bad file descriptor) [pid 7331] close(18) = -1 EBADF (Bad file descriptor) [pid 7331] close(19) = -1 EBADF (Bad file descriptor) [pid 7331] close(20) = -1 EBADF (Bad file descriptor) [pid 7331] close(21) = -1 EBADF (Bad file descriptor) [pid 7331] close(22) = -1 EBADF (Bad file descriptor) [pid 7331] close(23) = -1 EBADF (Bad file descriptor) [pid 7331] close(24) = -1 EBADF (Bad file descriptor) [pid 7331] close(25) = -1 EBADF (Bad file descriptor) [pid 7331] close(26) = -1 EBADF (Bad file descriptor) [pid 7331] close(27) = -1 EBADF (Bad file descriptor) [pid 7331] close(28) = -1 EBADF (Bad file descriptor) [pid 7331] close(29) = -1 EBADF (Bad file descriptor) [pid 7331] exit_group(0) = ? [pid 7333] <... futex resumed>) = ? [pid 7332] <... futex resumed>) = ? [pid 7333] +++ exited with 0 +++ [pid 7332] +++ exited with 0 +++ [pid 7331] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2289, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./769", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./769", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./769/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./769/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./769/cgroup.cpu") = 0 [pid 5028] umount2("./769/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./769/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./769/binderfs") = 0 [pid 5028] umount2("./769/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./769/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./769/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./769/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./769/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./769/file0") = 0 [pid 5028] umount2("./769/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./769/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./769/cgroup") = 0 [pid 5028] umount2("./769/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./769/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./769/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./769") = 0 [pid 5028] mkdir("./770", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7334 attached , child_tidptr=0x5555563a5690) = 2292 [pid 7334] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7334] chdir("./770") = 0 [pid 7334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7334] setpgid(0, 0) = 0 [pid 7334] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7334] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7334] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7334] write(3, "1000", 4) = 4 [pid 7334] close(3) = 0 [pid 7334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7334] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7334] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7335 attached [pid 7335] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7334] <... clone3 resumed> => {parent_tid=[2293]}, 88) = 2293 [pid 7335] <... rseq resumed>) = 0 [pid 7334] rt_sigprocmask(SIG_SETMASK, [], [pid 7335] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7334] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] memfd_create("syzkaller", 0 [pid 7334] <... futex resumed>) = 0 [pid 7334] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7335] <... memfd_create resumed>) = 3 [pid 7335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7335] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7335] munmap(0x7feef78ae000, 2097152) = 0 [pid 7335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7335] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7335] close(3) = 0 [pid 7335] mkdir("./file0", 0777) = 0 [pid 7335] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7335] chdir("./file0") = 0 [pid 7335] ioctl(4, LOOP_CLR_FD) = 0 [pid 7335] close(4) = 0 [pid 7335] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] <... futex resumed>) = 0 [pid 7334] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7335] <... futex resumed>) = 1 [pid 7335] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7335] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] <... futex resumed>) = 0 [pid 7334] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7335] <... futex resumed>) = 1 [pid 7335] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7335] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7334] <... futex resumed>) = 0 [pid 7335] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7334] <... futex resumed>) = 0 [pid 7335] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 242.755055][ T7335] loop0: detected capacity change from 0 to 4096 [ 242.764137][ T7335] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 242.796526][ T7335] ntfs: volume version 3.1. [pid 7334] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7334] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 7335] <... write resumed>) = 1048064 [pid 7334] <... mmap resumed>) = 0x7feef7a8d000 [pid 7335] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7334] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE [pid 7335] <... futex resumed>) = 0 [pid 7335] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] <... mprotect resumed>) = 0 [pid 7334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7336 attached => {parent_tid=[2294]}, 88) = 2294 [pid 7336] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7334] rt_sigprocmask(SIG_SETMASK, [], [pid 7336] <... rseq resumed>) = 0 [pid 7334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7336] set_robust_list(0x7feef7aad9a0, 24 [pid 7334] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7336] <... set_robust_list resumed>) = 0 [pid 7334] <... futex resumed>) = 0 [pid 7336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7334] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7336] ftruncate(4, 0) = 0 [pid 7336] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7334] <... futex resumed>) = 0 [pid 7336] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7334] close(3) = 0 [pid 7334] close(4) = 0 [pid 7334] close(5) = 0 [pid 7334] close(6) = -1 EBADF (Bad file descriptor) [pid 7334] close(7) = -1 EBADF (Bad file descriptor) [pid 7334] close(8) = -1 EBADF (Bad file descriptor) [pid 7334] close(9) = -1 EBADF (Bad file descriptor) [pid 7334] close(10) = -1 EBADF (Bad file descriptor) [pid 7334] close(11) = -1 EBADF (Bad file descriptor) [pid 7334] close(12) = -1 EBADF (Bad file descriptor) [pid 7334] close(13) = -1 EBADF (Bad file descriptor) [pid 7334] close(14) = -1 EBADF (Bad file descriptor) [pid 7334] close(15) = -1 EBADF (Bad file descriptor) [pid 7334] close(16) = -1 EBADF (Bad file descriptor) [pid 7334] close(17) = -1 EBADF (Bad file descriptor) [pid 7334] close(18) = -1 EBADF (Bad file descriptor) [pid 7334] close(19) = -1 EBADF (Bad file descriptor) [pid 7334] close(20) = -1 EBADF (Bad file descriptor) [pid 7334] close(21) = -1 EBADF (Bad file descriptor) [pid 7334] close(22) = -1 EBADF (Bad file descriptor) [pid 7334] close(23) = -1 EBADF (Bad file descriptor) [pid 7334] close(24) = -1 EBADF (Bad file descriptor) [pid 7334] close(25) = -1 EBADF (Bad file descriptor) [pid 7334] close(26) = -1 EBADF (Bad file descriptor) [pid 7334] close(27) = -1 EBADF (Bad file descriptor) [pid 7334] close(28) = -1 EBADF (Bad file descriptor) [pid 7334] close(29) = -1 EBADF (Bad file descriptor) [pid 7334] exit_group(0) = ? [pid 7335] <... futex resumed>) = ? [pid 7336] <... futex resumed>) = ? [pid 7336] +++ exited with 0 +++ [pid 7335] +++ exited with 0 +++ [pid 7334] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2292, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./770", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./770", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./770/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./770/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./770/cgroup.cpu") = 0 [pid 5028] umount2("./770/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./770/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./770/binderfs") = 0 [pid 5028] umount2("./770/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./770/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./770/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./770/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./770/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./770/file0") = 0 [pid 5028] umount2("./770/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./770/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./770/cgroup") = 0 [pid 5028] umount2("./770/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./770/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./770/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./770") = 0 [pid 5028] mkdir("./771", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2295 ./strace-static-x86_64: Process 7337 attached [pid 7337] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7337] chdir("./771") = 0 [pid 7337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7337] setpgid(0, 0) = 0 [pid 7337] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7337] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7337] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7337] write(3, "1000", 4) = 4 [pid 7337] close(3) = 0 [pid 7337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7337] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7337] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7337] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7338 attached => {parent_tid=[2296]}, 88) = 2296 [pid 7338] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7337] rt_sigprocmask(SIG_SETMASK, [], [pid 7338] <... rseq resumed>) = 0 [pid 7337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7338] set_robust_list(0x7feeffcce9a0, 24 [pid 7337] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7338] <... set_robust_list resumed>) = 0 [pid 7337] <... futex resumed>) = 0 [pid 7338] rt_sigprocmask(SIG_SETMASK, [], [pid 7337] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7338] memfd_create("syzkaller", 0) = 3 [pid 7338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7338] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7338] munmap(0x7feef78ae000, 2097152) = 0 [pid 7338] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7338] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7338] close(3) = 0 [pid 7338] mkdir("./file0", 0777) = 0 [pid 7338] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7338] chdir("./file0") = 0 [pid 7338] ioctl(4, LOOP_CLR_FD) = 0 [pid 7338] close(4) = 0 [pid 7338] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7338] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7337] <... futex resumed>) = 0 [pid 7337] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7338] <... futex resumed>) = 0 [pid 7337] <... futex resumed>) = 1 [pid 7338] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7337] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7338] <... openat resumed>) = 4 [pid 7338] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7337] <... futex resumed>) = 0 [pid 7338] <... futex resumed>) = 1 [pid 7337] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7338] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7337] <... futex resumed>) = 0 [pid 7337] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7338] <... openat resumed>) = 5 [pid 7338] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7337] <... futex resumed>) = 0 [pid 7337] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7338] <... futex resumed>) = 1 [pid 7337] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 243.002142][ T7338] loop0: detected capacity change from 0 to 4096 [ 243.011631][ T7338] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.044623][ T7338] ntfs: volume version 3.1. [pid 7338] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7337] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7337] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2297]}, 88) = 2297 [pid 7337] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7339 attached [pid 7339] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7337] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7337] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7339] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7339] ftruncate(4, 0) = 0 [pid 7339] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7338] <... write resumed>) = 1048064 [pid 7338] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7338] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7339] <... futex resumed>) = 1 [pid 7339] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7337] <... futex resumed>) = 0 [pid 7337] close(3) = 0 [pid 7337] close(4) = 0 [pid 7337] close(5) = 0 [pid 7337] close(6) = -1 EBADF (Bad file descriptor) [pid 7337] close(7) = -1 EBADF (Bad file descriptor) [pid 7337] close(8) = -1 EBADF (Bad file descriptor) [pid 7337] close(9) = -1 EBADF (Bad file descriptor) [pid 7337] close(10) = -1 EBADF (Bad file descriptor) [pid 7337] close(11) = -1 EBADF (Bad file descriptor) [pid 7337] close(12) = -1 EBADF (Bad file descriptor) [pid 7337] close(13) = -1 EBADF (Bad file descriptor) [pid 7337] close(14) = -1 EBADF (Bad file descriptor) [pid 7337] close(15) = -1 EBADF (Bad file descriptor) [pid 7337] close(16) = -1 EBADF (Bad file descriptor) [pid 7337] close(17) = -1 EBADF (Bad file descriptor) [pid 7337] close(18) = -1 EBADF (Bad file descriptor) [pid 7337] close(19) = -1 EBADF (Bad file descriptor) [pid 7337] close(20) = -1 EBADF (Bad file descriptor) [pid 7337] close(21) = -1 EBADF (Bad file descriptor) [pid 7337] close(22) = -1 EBADF (Bad file descriptor) [pid 7337] close(23) = -1 EBADF (Bad file descriptor) [pid 7337] close(24) = -1 EBADF (Bad file descriptor) [pid 7337] close(25) = -1 EBADF (Bad file descriptor) [pid 7337] close(26) = -1 EBADF (Bad file descriptor) [pid 7337] close(27) = -1 EBADF (Bad file descriptor) [pid 7337] close(28) = -1 EBADF (Bad file descriptor) [pid 7337] close(29) = -1 EBADF (Bad file descriptor) [pid 7337] exit_group(0 [pid 7338] <... futex resumed>) = ? [pid 7337] <... exit_group resumed>) = ? [pid 7339] <... futex resumed>) = ? [pid 7338] +++ exited with 0 +++ [pid 7339] +++ exited with 0 +++ [pid 7337] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2295, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./771", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./771", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./771/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./771/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./771/cgroup.cpu") = 0 [pid 5028] umount2("./771/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./771/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./771/binderfs") = 0 [pid 5028] umount2("./771/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./771/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./771/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./771/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./771/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./771/file0") = 0 [pid 5028] umount2("./771/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./771/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./771/cgroup") = 0 [pid 5028] umount2("./771/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./771/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./771/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./771") = 0 [pid 5028] mkdir("./772", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7340 attached , child_tidptr=0x5555563a5690) = 2298 [pid 7340] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7340] chdir("./772") = 0 [pid 7340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7340] setpgid(0, 0) = 0 [pid 7340] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7340] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7340] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7340] write(3, "1000", 4) = 4 [pid 7340] close(3) = 0 [pid 7340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7340] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7340] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7340] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7340] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7340] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7340] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7341 attached [pid 7341] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7340] <... clone3 resumed> => {parent_tid=[2299]}, 88) = 2299 [pid 7341] <... rseq resumed>) = 0 [pid 7340] rt_sigprocmask(SIG_SETMASK, [], [pid 7341] set_robust_list(0x7feeffcce9a0, 24 [pid 7340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7341] <... set_robust_list resumed>) = 0 [pid 7341] rt_sigprocmask(SIG_SETMASK, [], [pid 7340] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7340] <... futex resumed>) = 0 [pid 7341] memfd_create("syzkaller", 0 [pid 7340] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7341] <... memfd_create resumed>) = 3 [pid 7341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7341] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7341] munmap(0x7feef78ae000, 2097152) = 0 [pid 7341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7341] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7341] close(3) = 0 [pid 7341] mkdir("./file0", 0777) = 0 [pid 7341] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7341] chdir("./file0") = 0 [pid 7341] ioctl(4, LOOP_CLR_FD) = 0 [pid 7341] close(4) = 0 [pid 7341] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7340] <... futex resumed>) = 0 [pid 7341] <... futex resumed>) = 1 [pid 7340] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7341] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7340] <... futex resumed>) = 0 [pid 7340] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7341] <... openat resumed>) = 4 [pid 7341] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7341] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7340] <... futex resumed>) = 0 [pid 7340] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7341] <... futex resumed>) = 0 [pid 7341] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7340] <... futex resumed>) = 1 [pid 7341] <... openat resumed>) = 5 [pid 7340] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7341] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7340] <... futex resumed>) = 0 [pid 7341] <... futex resumed>) = 1 [pid 7340] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7341] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7340] <... futex resumed>) = 0 [ 243.231960][ T7341] loop0: detected capacity change from 0 to 4096 [ 243.241237][ T7341] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.274240][ T7341] ntfs: volume version 3.1. [pid 7340] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7340] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7340] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7340] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7340] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7342 attached [pid 7342] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7340] <... clone3 resumed> => {parent_tid=[2300]}, 88) = 2300 [pid 7342] set_robust_list(0x7feef7aad9a0, 24 [pid 7340] rt_sigprocmask(SIG_SETMASK, [], [pid 7342] <... set_robust_list resumed>) = 0 [pid 7340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7340] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7342] ftruncate(4, 0 [pid 7340] <... futex resumed>) = 0 [pid 7340] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7342] <... ftruncate resumed>) = 0 [pid 7342] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7340] <... futex resumed>) = 0 [pid 7342] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7341] <... write resumed>) = 1048064 [pid 7341] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7341] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7340] close(3) = 0 [pid 7340] close(4) = 0 [pid 7340] close(5) = 0 [pid 7340] close(6) = -1 EBADF (Bad file descriptor) [pid 7340] close(7) = -1 EBADF (Bad file descriptor) [pid 7340] close(8) = -1 EBADF (Bad file descriptor) [pid 7340] close(9) = -1 EBADF (Bad file descriptor) [pid 7340] close(10) = -1 EBADF (Bad file descriptor) [pid 7340] close(11) = -1 EBADF (Bad file descriptor) [pid 7340] close(12) = -1 EBADF (Bad file descriptor) [pid 7340] close(13) = -1 EBADF (Bad file descriptor) [pid 7340] close(14) = -1 EBADF (Bad file descriptor) [pid 7340] close(15) = -1 EBADF (Bad file descriptor) [pid 7340] close(16) = -1 EBADF (Bad file descriptor) [pid 7340] close(17) = -1 EBADF (Bad file descriptor) [pid 7340] close(18) = -1 EBADF (Bad file descriptor) [pid 7340] close(19) = -1 EBADF (Bad file descriptor) [pid 7340] close(20) = -1 EBADF (Bad file descriptor) [pid 7340] close(21) = -1 EBADF (Bad file descriptor) [pid 7340] close(22) = -1 EBADF (Bad file descriptor) [pid 7340] close(23) = -1 EBADF (Bad file descriptor) [pid 7340] close(24) = -1 EBADF (Bad file descriptor) [pid 7340] close(25) = -1 EBADF (Bad file descriptor) [pid 7340] close(26) = -1 EBADF (Bad file descriptor) [pid 7340] close(27) = -1 EBADF (Bad file descriptor) [pid 7340] close(28) = -1 EBADF (Bad file descriptor) [pid 7340] close(29) = -1 EBADF (Bad file descriptor) [pid 7340] exit_group(0 [pid 7342] <... futex resumed>) = ? [pid 7342] +++ exited with 0 +++ [pid 7341] <... futex resumed>) = ? [pid 7341] +++ exited with 0 +++ [pid 7340] <... exit_group resumed>) = ? [pid 7340] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2298, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./772", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./772", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./772/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./772/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./772/cgroup.cpu") = 0 [pid 5028] umount2("./772/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./772/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./772/binderfs") = 0 [pid 5028] umount2("./772/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./772/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./772/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./772/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./772/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./772/file0") = 0 [pid 5028] umount2("./772/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./772/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./772/cgroup") = 0 [pid 5028] umount2("./772/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./772/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./772/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./772") = 0 [pid 5028] mkdir("./773", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2301 ./strace-static-x86_64: Process 7343 attached [pid 7343] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7343] chdir("./773") = 0 [pid 7343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7343] setpgid(0, 0) = 0 [pid 7343] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7343] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7343] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7343] write(3, "1000", 4) = 4 [pid 7343] close(3) = 0 [pid 7343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7343] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7343] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7343] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7344 attached [pid 7344] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7343] <... clone3 resumed> => {parent_tid=[2302]}, 88) = 2302 [pid 7344] <... rseq resumed>) = 0 [pid 7343] rt_sigprocmask(SIG_SETMASK, [], [pid 7344] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7344] rt_sigprocmask(SIG_SETMASK, [], [pid 7343] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7343] <... futex resumed>) = 0 [pid 7344] memfd_create("syzkaller", 0 [pid 7343] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7344] <... memfd_create resumed>) = 3 [pid 7344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7344] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7344] munmap(0x7feef78ae000, 2097152) = 0 [pid 7344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7344] close(3) = 0 [pid 7344] mkdir("./file0", 0777) = 0 [pid 7344] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7344] chdir("./file0") = 0 [pid 7344] ioctl(4, LOOP_CLR_FD) = 0 [pid 7344] close(4) = 0 [pid 7344] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7343] <... futex resumed>) = 0 [pid 7343] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7344] <... futex resumed>) = 1 [pid 7343] <... futex resumed>) = 0 [pid 7344] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7343] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7344] <... openat resumed>) = 4 [pid 7344] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7343] <... futex resumed>) = 0 [pid 7343] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7344] <... futex resumed>) = 1 [pid 7343] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7344] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7344] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7343] <... futex resumed>) = 0 [pid 7344] <... futex resumed>) = 1 [pid 7343] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7343] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 243.464737][ T7344] loop0: detected capacity change from 0 to 4096 [ 243.473443][ T7344] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.506623][ T7344] ntfs: volume version 3.1. [pid 7344] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7343] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7343] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7343] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7345 attached [pid 7345] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7343] <... clone3 resumed> => {parent_tid=[2303]}, 88) = 2303 [pid 7345] <... rseq resumed>) = 0 [pid 7343] rt_sigprocmask(SIG_SETMASK, [], [pid 7345] set_robust_list(0x7feef7aad9a0, 24 [pid 7343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7345] <... set_robust_list resumed>) = 0 [pid 7343] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7345] ftruncate(4, 0 [pid 7343] <... futex resumed>) = 0 [pid 7343] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7345] <... ftruncate resumed>) = 0 [pid 7345] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7343] <... futex resumed>) = 0 [pid 7345] <... futex resumed>) = 1 [pid 7345] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7344] <... write resumed>) = 1048064 [pid 7344] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7344] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7343] close(3) = 0 [pid 7343] close(4) = 0 [pid 7343] close(5) = 0 [pid 7343] close(6) = -1 EBADF (Bad file descriptor) [pid 7343] close(7) = -1 EBADF (Bad file descriptor) [pid 7343] close(8) = -1 EBADF (Bad file descriptor) [pid 7343] close(9) = -1 EBADF (Bad file descriptor) [pid 7343] close(10) = -1 EBADF (Bad file descriptor) [pid 7343] close(11) = -1 EBADF (Bad file descriptor) [pid 7343] close(12) = -1 EBADF (Bad file descriptor) [pid 7343] close(13) = -1 EBADF (Bad file descriptor) [pid 7343] close(14) = -1 EBADF (Bad file descriptor) [pid 7343] close(15) = -1 EBADF (Bad file descriptor) [pid 7343] close(16) = -1 EBADF (Bad file descriptor) [pid 7343] close(17) = -1 EBADF (Bad file descriptor) [pid 7343] close(18) = -1 EBADF (Bad file descriptor) [pid 7343] close(19) = -1 EBADF (Bad file descriptor) [pid 7343] close(20) = -1 EBADF (Bad file descriptor) [pid 7343] close(21) = -1 EBADF (Bad file descriptor) [pid 7343] close(22) = -1 EBADF (Bad file descriptor) [pid 7343] close(23) = -1 EBADF (Bad file descriptor) [pid 7343] close(24) = -1 EBADF (Bad file descriptor) [pid 7343] close(25) = -1 EBADF (Bad file descriptor) [pid 7343] close(26) = -1 EBADF (Bad file descriptor) [pid 7343] close(27) = -1 EBADF (Bad file descriptor) [pid 7343] close(28) = -1 EBADF (Bad file descriptor) [pid 7343] close(29) = -1 EBADF (Bad file descriptor) [pid 7343] exit_group(0) = ? [pid 7345] <... futex resumed>) = ? [pid 7344] <... futex resumed>) = ? [pid 7345] +++ exited with 0 +++ [pid 7344] +++ exited with 0 +++ [pid 7343] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2301, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./773", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./773", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./773/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./773/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./773/cgroup.cpu") = 0 [pid 5028] umount2("./773/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./773/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./773/binderfs") = 0 [pid 5028] umount2("./773/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./773/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./773/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./773/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./773/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./773/file0") = 0 [pid 5028] umount2("./773/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./773/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./773/cgroup") = 0 [pid 5028] umount2("./773/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./773/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./773/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./773") = 0 [pid 5028] mkdir("./774", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7346 attached , child_tidptr=0x5555563a5690) = 2304 [pid 7346] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7346] chdir("./774") = 0 [pid 7346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7346] setpgid(0, 0) = 0 [pid 7346] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7346] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7346] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7346] write(3, "1000", 4) = 4 [pid 7346] close(3) = 0 [pid 7346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7346] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7346] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7346] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7347 attached [pid 7347] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7347] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7347] rt_sigprocmask(SIG_SETMASK, [], [pid 7346] <... clone3 resumed> => {parent_tid=[2305]}, 88) = 2305 [pid 7347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7347] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7346] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7346] <... futex resumed>) = 0 [pid 7346] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7347] memfd_create("syzkaller", 0) = 3 [pid 7347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7347] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7347] munmap(0x7feef78ae000, 2097152) = 0 [pid 7347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7347] close(3) = 0 [pid 7347] mkdir("./file0", 0777) = 0 [pid 7347] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7347] chdir("./file0") = 0 [pid 7347] ioctl(4, LOOP_CLR_FD) = 0 [pid 7347] close(4) = 0 [pid 7347] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7346] <... futex resumed>) = 0 [pid 7346] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7346] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7347] <... openat resumed>) = 4 [pid 7347] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7346] <... futex resumed>) = 0 [pid 7347] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7346] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] <... openat resumed>) = 5 [pid 7346] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7347] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7346] <... futex resumed>) = 0 [pid 7346] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7347] <... futex resumed>) = 1 [pid 7346] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 243.693858][ T7347] loop0: detected capacity change from 0 to 4096 [ 243.702817][ T7347] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.734785][ T7347] ntfs: volume version 3.1. [pid 7347] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7346] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7346] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7348 attached => {parent_tid=[2306]}, 88) = 2306 [pid 7348] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7348] <... rseq resumed>) = 0 [pid 7348] set_robust_list(0x7feef7aad9a0, 24 [pid 7346] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7348] <... set_robust_list resumed>) = 0 [pid 7346] <... futex resumed>) = 0 [pid 7348] rt_sigprocmask(SIG_SETMASK, [], [pid 7346] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7348] ftruncate(4, 0) = 0 [pid 7348] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7347] <... write resumed>) = 1048064 [pid 7348] <... futex resumed>) = 1 [pid 7347] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7348] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7347] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7346] <... futex resumed>) = 0 [pid 7346] close(3) = 0 [pid 7346] close(4) = 0 [pid 7346] close(5) = 0 [pid 7346] close(6) = -1 EBADF (Bad file descriptor) [pid 7346] close(7) = -1 EBADF (Bad file descriptor) [pid 7346] close(8) = -1 EBADF (Bad file descriptor) [pid 7346] close(9) = -1 EBADF (Bad file descriptor) [pid 7346] close(10) = -1 EBADF (Bad file descriptor) [pid 7346] close(11) = -1 EBADF (Bad file descriptor) [pid 7346] close(12) = -1 EBADF (Bad file descriptor) [pid 7346] close(13) = -1 EBADF (Bad file descriptor) [pid 7346] close(14) = -1 EBADF (Bad file descriptor) [pid 7346] close(15) = -1 EBADF (Bad file descriptor) [pid 7346] close(16) = -1 EBADF (Bad file descriptor) [pid 7346] close(17) = -1 EBADF (Bad file descriptor) [pid 7346] close(18) = -1 EBADF (Bad file descriptor) [pid 7346] close(19) = -1 EBADF (Bad file descriptor) [pid 7346] close(20) = -1 EBADF (Bad file descriptor) [pid 7346] close(21) = -1 EBADF (Bad file descriptor) [pid 7346] close(22) = -1 EBADF (Bad file descriptor) [pid 7346] close(23) = -1 EBADF (Bad file descriptor) [pid 7346] close(24) = -1 EBADF (Bad file descriptor) [pid 7346] close(25) = -1 EBADF (Bad file descriptor) [pid 7346] close(26) = -1 EBADF (Bad file descriptor) [pid 7346] close(27) = -1 EBADF (Bad file descriptor) [pid 7346] close(28) = -1 EBADF (Bad file descriptor) [pid 7346] close(29) = -1 EBADF (Bad file descriptor) [pid 7346] exit_group(0 [pid 7347] <... futex resumed>) = ? [pid 7347] +++ exited with 0 +++ [pid 7348] <... futex resumed>) = ? [pid 7346] <... exit_group resumed>) = ? [pid 7348] +++ exited with 0 +++ [pid 7346] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2304, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./774", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./774", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./774/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./774/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./774/cgroup.cpu") = 0 [pid 5028] umount2("./774/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./774/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./774/binderfs") = 0 [pid 5028] umount2("./774/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./774/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./774/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./774/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./774/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./774/file0") = 0 [pid 5028] umount2("./774/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./774/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./774/cgroup") = 0 [pid 5028] umount2("./774/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./774/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./774/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./774") = 0 [pid 5028] mkdir("./775", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7349 attached , child_tidptr=0x5555563a5690) = 2307 [pid 7349] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7349] chdir("./775") = 0 [pid 7349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7349] setpgid(0, 0) = 0 [pid 7349] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7349] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7349] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7349] write(3, "1000", 4) = 4 [pid 7349] close(3) = 0 [pid 7349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7349] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7349] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7349] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7349] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7349] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7350 attached => {parent_tid=[2308]}, 88) = 2308 [pid 7350] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7349] rt_sigprocmask(SIG_SETMASK, [], [pid 7350] <... rseq resumed>) = 0 [pid 7349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7350] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7350] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7350] <... futex resumed>) = 0 [pid 7349] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7350] memfd_create("syzkaller", 0) = 3 [pid 7350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7350] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7350] munmap(0x7feef78ae000, 2097152) = 0 [pid 7350] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7350] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7350] close(3) = 0 [pid 7350] mkdir("./file0", 0777) = 0 [pid 7350] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7350] chdir("./file0") = 0 [pid 7350] ioctl(4, LOOP_CLR_FD) = 0 [pid 7350] close(4) = 0 [pid 7350] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7350] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] <... futex resumed>) = 0 [pid 7349] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] <... futex resumed>) = 0 [pid 7349] <... futex resumed>) = 1 [pid 7350] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7349] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7350] <... openat resumed>) = 4 [pid 7350] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7350] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] <... futex resumed>) = 0 [pid 7349] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] <... futex resumed>) = 0 [pid 7349] <... futex resumed>) = 1 [pid 7350] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7350] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7349] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7350] <... futex resumed>) = 0 [pid 7349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7350] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7349] <... futex resumed>) = 0 [pid 7350] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 243.937712][ T7350] loop0: detected capacity change from 0 to 4096 [ 243.946618][ T7350] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.981093][ T7350] ntfs: volume version 3.1. [pid 7349] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7349] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7349] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7349] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2309]}, 88) = 2309 ./strace-static-x86_64: Process 7351 attached [pid 7349] rt_sigprocmask(SIG_SETMASK, [], [pid 7351] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7351] <... rseq resumed>) = 0 [pid 7351] set_robust_list(0x7feef7aad9a0, 24 [pid 7349] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] <... set_robust_list resumed>) = 0 [pid 7351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7349] <... futex resumed>) = 0 [pid 7349] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7351] ftruncate(4, 0) = 0 [pid 7350] <... write resumed>) = 1048064 [pid 7351] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7350] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7351] <... futex resumed>) = 1 [pid 7350] <... futex resumed>) = 0 [pid 7349] <... futex resumed>) = 0 [pid 7351] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7350] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7349] close(3) = 0 [pid 7349] close(4) = 0 [pid 7349] close(5) = 0 [pid 7349] close(6) = -1 EBADF (Bad file descriptor) [pid 7349] close(7) = -1 EBADF (Bad file descriptor) [pid 7349] close(8) = -1 EBADF (Bad file descriptor) [pid 7349] close(9) = -1 EBADF (Bad file descriptor) [pid 7349] close(10) = -1 EBADF (Bad file descriptor) [pid 7349] close(11) = -1 EBADF (Bad file descriptor) [pid 7349] close(12) = -1 EBADF (Bad file descriptor) [pid 7349] close(13) = -1 EBADF (Bad file descriptor) [pid 7349] close(14) = -1 EBADF (Bad file descriptor) [pid 7349] close(15) = -1 EBADF (Bad file descriptor) [pid 7349] close(16) = -1 EBADF (Bad file descriptor) [pid 7349] close(17) = -1 EBADF (Bad file descriptor) [pid 7349] close(18) = -1 EBADF (Bad file descriptor) [pid 7349] close(19) = -1 EBADF (Bad file descriptor) [pid 7349] close(20) = -1 EBADF (Bad file descriptor) [pid 7349] close(21) = -1 EBADF (Bad file descriptor) [pid 7349] close(22) = -1 EBADF (Bad file descriptor) [pid 7349] close(23) = -1 EBADF (Bad file descriptor) [pid 7349] close(24) = -1 EBADF (Bad file descriptor) [pid 7349] close(25) = -1 EBADF (Bad file descriptor) [pid 7349] close(26) = -1 EBADF (Bad file descriptor) [pid 7349] close(27) = -1 EBADF (Bad file descriptor) [pid 7349] close(28) = -1 EBADF (Bad file descriptor) [pid 7349] close(29) = -1 EBADF (Bad file descriptor) [pid 7349] exit_group(0) = ? [pid 7350] <... futex resumed>) = ? [pid 7351] <... futex resumed>) = ? [pid 7350] +++ exited with 0 +++ [pid 7351] +++ exited with 0 +++ [pid 7349] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2307, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./775", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./775", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./775/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./775/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./775/cgroup.cpu") = 0 [pid 5028] umount2("./775/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./775/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./775/binderfs") = 0 [pid 5028] umount2("./775/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./775/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./775/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./775/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./775/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./775/file0") = 0 [pid 5028] umount2("./775/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./775/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./775/cgroup") = 0 [pid 5028] umount2("./775/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./775/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./775/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./775") = 0 [pid 5028] mkdir("./776", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7352 attached , child_tidptr=0x5555563a5690) = 2310 [pid 7352] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7352] chdir("./776") = 0 [pid 7352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7352] setpgid(0, 0) = 0 [pid 7352] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7352] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7352] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7352] write(3, "1000", 4) = 4 [pid 7352] close(3) = 0 [pid 7352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7352] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7352] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7353 attached => {parent_tid=[2311]}, 88) = 2311 [pid 7353] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7352] rt_sigprocmask(SIG_SETMASK, [], [pid 7353] set_robust_list(0x7feeffcce9a0, 24 [pid 7352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7353] <... set_robust_list resumed>) = 0 [pid 7353] rt_sigprocmask(SIG_SETMASK, [], [pid 7352] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7352] <... futex resumed>) = 0 [pid 7353] memfd_create("syzkaller", 0 [pid 7352] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7353] <... memfd_create resumed>) = 3 [pid 7353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7353] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7353] munmap(0x7feef78ae000, 2097152) = 0 [pid 7353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7353] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7353] close(3) = 0 [pid 7353] mkdir("./file0", 0777) = 0 [pid 7353] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7353] chdir("./file0") = 0 [pid 7353] ioctl(4, LOOP_CLR_FD) = 0 [pid 7353] close(4) = 0 [pid 7353] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7352] <... futex resumed>) = 0 [pid 7353] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7352] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7353] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7352] <... futex resumed>) = 0 [pid 7352] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7353] <... openat resumed>) = 4 [pid 7353] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... futex resumed>) = 0 [pid 7352] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7353] <... futex resumed>) = 1 [pid 7353] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7353] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7352] <... futex resumed>) = 0 [pid 7352] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... futex resumed>) = 1 [pid 7352] <... futex resumed>) = 0 [pid 7352] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 244.182374][ T7353] loop0: detected capacity change from 0 to 4096 [ 244.204692][ T7353] ntfs: volume version 3.1. [pid 7353] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7352] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7352] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7352] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7352] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7354 attached => {parent_tid=[2312]}, 88) = 2312 [pid 7354] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7352] rt_sigprocmask(SIG_SETMASK, [], [pid 7354] <... rseq resumed>) = 0 [pid 7352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7354] set_robust_list(0x7feef7aad9a0, 24 [pid 7352] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7354] <... set_robust_list resumed>) = 0 [pid 7354] rt_sigprocmask(SIG_SETMASK, [], [pid 7352] <... futex resumed>) = 0 [pid 7354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7352] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7354] ftruncate(4, 0) = 0 [pid 7354] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7353] <... write resumed>) = 1048064 [pid 7354] <... futex resumed>) = 1 [pid 7354] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7352] <... futex resumed>) = 0 [pid 7353] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7353] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7352] close(3) = 0 [pid 7352] close(4) = 0 [pid 7352] close(5) = 0 [pid 7352] close(6) = -1 EBADF (Bad file descriptor) [pid 7352] close(7) = -1 EBADF (Bad file descriptor) [pid 7352] close(8) = -1 EBADF (Bad file descriptor) [pid 7352] close(9) = -1 EBADF (Bad file descriptor) [pid 7352] close(10) = -1 EBADF (Bad file descriptor) [pid 7352] close(11) = -1 EBADF (Bad file descriptor) [pid 7352] close(12) = -1 EBADF (Bad file descriptor) [pid 7352] close(13) = -1 EBADF (Bad file descriptor) [pid 7352] close(14) = -1 EBADF (Bad file descriptor) [pid 7352] close(15) = -1 EBADF (Bad file descriptor) [pid 7352] close(16) = -1 EBADF (Bad file descriptor) [pid 7352] close(17) = -1 EBADF (Bad file descriptor) [pid 7352] close(18) = -1 EBADF (Bad file descriptor) [pid 7352] close(19) = -1 EBADF (Bad file descriptor) [pid 7352] close(20) = -1 EBADF (Bad file descriptor) [pid 7352] close(21) = -1 EBADF (Bad file descriptor) [pid 7352] close(22) = -1 EBADF (Bad file descriptor) [pid 7352] close(23) = -1 EBADF (Bad file descriptor) [pid 7352] close(24) = -1 EBADF (Bad file descriptor) [pid 7352] close(25) = -1 EBADF (Bad file descriptor) [pid 7352] close(26) = -1 EBADF (Bad file descriptor) [pid 7352] close(27) = -1 EBADF (Bad file descriptor) [pid 7352] close(28) = -1 EBADF (Bad file descriptor) [pid 7352] close(29) = -1 EBADF (Bad file descriptor) [pid 7352] exit_group(0 [pid 7353] <... futex resumed>) = ? [pid 7354] <... futex resumed>) = ? [pid 7352] <... exit_group resumed>) = ? [pid 7353] +++ exited with 0 +++ [pid 7354] +++ exited with 0 +++ [pid 7352] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2310, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./776", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./776", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./776/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./776/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./776/cgroup.cpu") = 0 [pid 5028] umount2("./776/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./776/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./776/binderfs") = 0 [pid 5028] umount2("./776/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./776/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./776/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./776/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./776/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./776/file0") = 0 [pid 5028] umount2("./776/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./776/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./776/cgroup") = 0 [pid 5028] umount2("./776/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./776/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./776/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./776") = 0 [pid 5028] mkdir("./777", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7355 attached , child_tidptr=0x5555563a5690) = 2313 [pid 7355] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7355] chdir("./777") = 0 [pid 7355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7355] setpgid(0, 0) = 0 [pid 7355] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7355] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7355] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7355] write(3, "1000", 4) = 4 [pid 7355] close(3) = 0 [pid 7355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7355] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7355] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7355] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7355] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7356 attached => {parent_tid=[2314]}, 88) = 2314 [pid 7356] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7355] rt_sigprocmask(SIG_SETMASK, [], [pid 7356] set_robust_list(0x7feeffcce9a0, 24 [pid 7355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7356] <... set_robust_list resumed>) = 0 [pid 7356] rt_sigprocmask(SIG_SETMASK, [], [pid 7355] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7356] memfd_create("syzkaller", 0 [pid 7355] <... futex resumed>) = 0 [pid 7356] <... memfd_create resumed>) = 3 [pid 7355] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7356] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7356] munmap(0x7feef78ae000, 2097152) = 0 [pid 7356] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7356] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7356] close(3) = 0 [pid 7356] mkdir("./file0", 0777) = 0 [pid 7356] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7356] chdir("./file0") = 0 [pid 7356] ioctl(4, LOOP_CLR_FD) = 0 [pid 7356] close(4) = 0 [pid 7356] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7355] <... futex resumed>) = 0 [pid 7355] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7355] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7356] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7356] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7355] <... futex resumed>) = 0 [pid 7356] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7355] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7355] <... futex resumed>) = 0 [pid 7355] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7356] <... openat resumed>) = 5 [pid 7356] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7355] <... futex resumed>) = 0 [pid 7356] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7355] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7355] <... futex resumed>) = 0 [ 244.399500][ T7356] loop0: detected capacity change from 0 to 4096 [ 244.421541][ T7356] ntfs: volume version 3.1. [pid 7355] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7355] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7355] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7355] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7357 attached [pid 7357] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7355] <... clone3 resumed> => {parent_tid=[2315]}, 88) = 2315 [pid 7357] <... rseq resumed>) = 0 [pid 7356] <... write resumed>) = 1048064 [pid 7355] rt_sigprocmask(SIG_SETMASK, [], [pid 7357] set_robust_list(0x7feef7aad9a0, 24 [pid 7356] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7357] <... set_robust_list resumed>) = 0 [pid 7355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7357] rt_sigprocmask(SIG_SETMASK, [], [pid 7355] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7356] <... futex resumed>) = 0 [pid 7357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7355] <... futex resumed>) = 0 [pid 7356] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7355] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7357] ftruncate(4, 0) = 0 [pid 7357] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7355] <... futex resumed>) = 0 [pid 7357] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7355] close(3) = 0 [pid 7355] close(4) = 0 [pid 7355] close(5) = 0 [pid 7355] close(6) = -1 EBADF (Bad file descriptor) [pid 7355] close(7) = -1 EBADF (Bad file descriptor) [pid 7355] close(8) = -1 EBADF (Bad file descriptor) [pid 7355] close(9) = -1 EBADF (Bad file descriptor) [pid 7355] close(10) = -1 EBADF (Bad file descriptor) [pid 7355] close(11) = -1 EBADF (Bad file descriptor) [pid 7355] close(12) = -1 EBADF (Bad file descriptor) [pid 7355] close(13) = -1 EBADF (Bad file descriptor) [pid 7355] close(14) = -1 EBADF (Bad file descriptor) [pid 7355] close(15) = -1 EBADF (Bad file descriptor) [pid 7355] close(16) = -1 EBADF (Bad file descriptor) [pid 7355] close(17) = -1 EBADF (Bad file descriptor) [pid 7355] close(18) = -1 EBADF (Bad file descriptor) [pid 7355] close(19) = -1 EBADF (Bad file descriptor) [pid 7355] close(20) = -1 EBADF (Bad file descriptor) [pid 7355] close(21) = -1 EBADF (Bad file descriptor) [pid 7355] close(22) = -1 EBADF (Bad file descriptor) [pid 7355] close(23) = -1 EBADF (Bad file descriptor) [pid 7355] close(24) = -1 EBADF (Bad file descriptor) [pid 7355] close(25) = -1 EBADF (Bad file descriptor) [pid 7355] close(26) = -1 EBADF (Bad file descriptor) [pid 7355] close(27) = -1 EBADF (Bad file descriptor) [pid 7355] close(28) = -1 EBADF (Bad file descriptor) [pid 7355] close(29) = -1 EBADF (Bad file descriptor) [pid 7355] exit_group(0) = ? [pid 7356] <... futex resumed>) = ? [pid 7357] <... futex resumed>) = ? [pid 7356] +++ exited with 0 +++ [pid 7357] +++ exited with 0 +++ [pid 7355] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2313, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./777", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./777", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./777/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./777/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./777/cgroup.cpu") = 0 [pid 5028] umount2("./777/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./777/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./777/binderfs") = 0 [pid 5028] umount2("./777/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./777/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./777/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./777/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./777/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./777/file0") = 0 [pid 5028] umount2("./777/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./777/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./777/cgroup") = 0 [pid 5028] umount2("./777/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./777/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./777/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./777") = 0 [pid 5028] mkdir("./778", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7358 attached , child_tidptr=0x5555563a5690) = 2316 [pid 7358] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7358] chdir("./778") = 0 [pid 7358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7358] setpgid(0, 0) = 0 [pid 7358] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7358] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7358] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7358] write(3, "1000", 4) = 4 [pid 7358] close(3) = 0 [pid 7358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7358] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7358] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7358] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2317]}, 88) = 2317 ./strace-static-x86_64: Process 7359 attached [pid 7358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7358] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7358] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7359] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7359] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7359] memfd_create("syzkaller", 0) = 3 [pid 7359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7359] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7359] munmap(0x7feef78ae000, 2097152) = 0 [pid 7359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7359] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7359] close(3) = 0 [pid 7359] mkdir("./file0", 0777) = 0 [pid 7359] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7359] chdir("./file0") = 0 [pid 7359] ioctl(4, LOOP_CLR_FD) = 0 [pid 7359] close(4) = 0 [pid 7359] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7358] <... futex resumed>) = 0 [pid 7359] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7358] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7358] <... futex resumed>) = 0 [pid 7359] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7358] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7359] <... openat resumed>) = 4 [pid 7359] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7359] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7358] <... futex resumed>) = 0 [pid 7358] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7359] <... futex resumed>) = 0 [pid 7358] <... futex resumed>) = 1 [pid 7359] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7358] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7359] <... openat resumed>) = 5 [pid 7359] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7359] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7358] <... futex resumed>) = 0 [pid 7358] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7359] <... futex resumed>) = 0 [pid 7358] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 244.627926][ T7359] loop0: detected capacity change from 0 to 4096 [ 244.649484][ T7359] ntfs: volume version 3.1. [pid 7359] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7358] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7358] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7360 attached => {parent_tid=[2318]}, 88) = 2318 [pid 7358] rt_sigprocmask(SIG_SETMASK, [], [pid 7360] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7360] <... rseq resumed>) = 0 [pid 7360] set_robust_list(0x7feef7aad9a0, 24 [pid 7358] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7360] <... set_robust_list resumed>) = 0 [pid 7358] <... futex resumed>) = 0 [pid 7360] rt_sigprocmask(SIG_SETMASK, [], [pid 7358] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7360] ftruncate(4, 0) = 0 [pid 7359] <... write resumed>) = 1048064 [pid 7360] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7359] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7360] <... futex resumed>) = 1 [pid 7359] <... futex resumed>) = 0 [pid 7358] <... futex resumed>) = 0 [pid 7360] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7359] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7358] close(3) = 0 [pid 7358] close(4) = 0 [pid 7358] close(5) = 0 [pid 7358] close(6) = -1 EBADF (Bad file descriptor) [pid 7358] close(7) = -1 EBADF (Bad file descriptor) [pid 7358] close(8) = -1 EBADF (Bad file descriptor) [pid 7358] close(9) = -1 EBADF (Bad file descriptor) [pid 7358] close(10) = -1 EBADF (Bad file descriptor) [pid 7358] close(11) = -1 EBADF (Bad file descriptor) [pid 7358] close(12) = -1 EBADF (Bad file descriptor) [pid 7358] close(13) = -1 EBADF (Bad file descriptor) [pid 7358] close(14) = -1 EBADF (Bad file descriptor) [pid 7358] close(15) = -1 EBADF (Bad file descriptor) [pid 7358] close(16) = -1 EBADF (Bad file descriptor) [pid 7358] close(17) = -1 EBADF (Bad file descriptor) [pid 7358] close(18) = -1 EBADF (Bad file descriptor) [pid 7358] close(19) = -1 EBADF (Bad file descriptor) [pid 7358] close(20) = -1 EBADF (Bad file descriptor) [pid 7358] close(21) = -1 EBADF (Bad file descriptor) [pid 7358] close(22) = -1 EBADF (Bad file descriptor) [pid 7358] close(23) = -1 EBADF (Bad file descriptor) [pid 7358] close(24) = -1 EBADF (Bad file descriptor) [pid 7358] close(25) = -1 EBADF (Bad file descriptor) [pid 7358] close(26) = -1 EBADF (Bad file descriptor) [pid 7358] close(27) = -1 EBADF (Bad file descriptor) [pid 7358] close(28) = -1 EBADF (Bad file descriptor) [pid 7358] close(29) = -1 EBADF (Bad file descriptor) [pid 7358] exit_group(0) = ? [pid 7360] <... futex resumed>) = ? [pid 7359] <... futex resumed>) = ? [pid 7360] +++ exited with 0 +++ [pid 7359] +++ exited with 0 +++ [pid 7358] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2316, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./778", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./778", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./778/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./778/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./778/cgroup.cpu") = 0 [pid 5028] umount2("./778/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./778/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./778/binderfs") = 0 [pid 5028] umount2("./778/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./778/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./778/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./778/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./778/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./778/file0") = 0 [pid 5028] umount2("./778/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./778/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./778/cgroup") = 0 [pid 5028] umount2("./778/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./778/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./778/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./778") = 0 [pid 5028] mkdir("./779", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7361 attached , child_tidptr=0x5555563a5690) = 2319 [pid 7361] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7361] chdir("./779") = 0 [pid 7361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7361] setpgid(0, 0) = 0 [pid 7361] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7361] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7361] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7361] write(3, "1000", 4) = 4 [pid 7361] close(3) = 0 [pid 7361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7361] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7361] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7361] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2320]}, 88) = 2320 [pid 7361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7361] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7361] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7362 attached [pid 7362] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7362] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7362] memfd_create("syzkaller", 0) = 3 [pid 7362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7362] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7362] munmap(0x7feef78ae000, 2097152) = 0 [pid 7362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7362] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7362] close(3) = 0 [pid 7362] mkdir("./file0", 0777) = 0 [pid 7362] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7362] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7362] chdir("./file0") = 0 [pid 7362] ioctl(4, LOOP_CLR_FD) = 0 [pid 7362] close(4) = 0 [pid 7362] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7361] <... futex resumed>) = 0 [pid 7362] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7361] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7361] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7362] <... openat resumed>) = 4 [pid 7362] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] <... futex resumed>) = 0 [pid 7362] <... futex resumed>) = 1 [pid 7361] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7361] <... futex resumed>) = 0 [pid 7362] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7362] <... futex resumed>) = 0 [pid 7362] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7361] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7361] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7362] <... futex resumed>) = 0 [pid 7361] <... futex resumed>) = 1 [pid 7362] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 244.861315][ T7362] loop0: detected capacity change from 0 to 4096 [ 244.882397][ T7362] ntfs: volume version 3.1. [pid 7361] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7361] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7361] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2321]}, 88) = 2321 ./strace-static-x86_64: Process 7363 attached [pid 7361] rt_sigprocmask(SIG_SETMASK, [], [pid 7363] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7363] <... rseq resumed>) = 0 [pid 7361] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7363] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7361] <... futex resumed>) = 0 [pid 7363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7363] ftruncate(4, 0 [pid 7361] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7363] <... ftruncate resumed>) = 0 [pid 7363] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7362] <... write resumed>) = 1048064 [pid 7361] <... futex resumed>) = 0 [pid 7362] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7361] close(3) = 0 [pid 7362] <... futex resumed>) = 0 [pid 7362] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7361] close(4) = 0 [pid 7361] close(5) = 0 [pid 7363] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7361] close(6) = -1 EBADF (Bad file descriptor) [pid 7361] close(7) = -1 EBADF (Bad file descriptor) [pid 7361] close(8) = -1 EBADF (Bad file descriptor) [pid 7361] close(9) = -1 EBADF (Bad file descriptor) [pid 7361] close(10) = -1 EBADF (Bad file descriptor) [pid 7361] close(11) = -1 EBADF (Bad file descriptor) [pid 7361] close(12) = -1 EBADF (Bad file descriptor) [pid 7361] close(13) = -1 EBADF (Bad file descriptor) [pid 7361] close(14) = -1 EBADF (Bad file descriptor) [pid 7361] close(15) = -1 EBADF (Bad file descriptor) [pid 7361] close(16) = -1 EBADF (Bad file descriptor) [pid 7361] close(17) = -1 EBADF (Bad file descriptor) [pid 7361] close(18) = -1 EBADF (Bad file descriptor) [pid 7361] close(19) = -1 EBADF (Bad file descriptor) [pid 7361] close(20) = -1 EBADF (Bad file descriptor) [pid 7361] close(21) = -1 EBADF (Bad file descriptor) [pid 7361] close(22) = -1 EBADF (Bad file descriptor) [pid 7361] close(23) = -1 EBADF (Bad file descriptor) [pid 7361] close(24) = -1 EBADF (Bad file descriptor) [pid 7361] close(25) = -1 EBADF (Bad file descriptor) [pid 7361] close(26) = -1 EBADF (Bad file descriptor) [pid 7361] close(27) = -1 EBADF (Bad file descriptor) [pid 7361] close(28) = -1 EBADF (Bad file descriptor) [pid 7361] close(29) = -1 EBADF (Bad file descriptor) [pid 7361] exit_group(0) = ? [pid 7363] <... futex resumed>) = ? [pid 7362] <... futex resumed>) = ? [pid 7362] +++ exited with 0 +++ [pid 7363] +++ exited with 0 +++ [pid 7361] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2319, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./779", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./779", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./779/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./779/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./779/cgroup.cpu") = 0 [pid 5028] umount2("./779/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./779/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./779/binderfs") = 0 [pid 5028] umount2("./779/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./779/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./779/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./779/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./779/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./779/file0") = 0 [pid 5028] umount2("./779/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./779/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./779/cgroup") = 0 [pid 5028] umount2("./779/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./779/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./779/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./779") = 0 [pid 5028] mkdir("./780", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7364 attached [pid 7364] set_robust_list(0x5555563a56a0, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2322 [pid 7364] chdir("./780") = 0 [pid 7364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7364] setpgid(0, 0) = 0 [pid 7364] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7364] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7364] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7364] write(3, "1000", 4) = 4 [pid 7364] close(3) = 0 [pid 7364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7364] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7364] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7364] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7365 attached => {parent_tid=[2323]}, 88) = 2323 [pid 7365] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7364] rt_sigprocmask(SIG_SETMASK, [], [pid 7365] <... rseq resumed>) = 0 [pid 7364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7365] set_robust_list(0x7feeffcce9a0, 24 [pid 7364] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7365] <... set_robust_list resumed>) = 0 [pid 7365] rt_sigprocmask(SIG_SETMASK, [], [pid 7364] <... futex resumed>) = 0 [pid 7365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7364] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7365] memfd_create("syzkaller", 0) = 3 [pid 7365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7365] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7365] munmap(0x7feef78ae000, 2097152) = 0 [pid 7365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7365] close(3) = 0 [pid 7365] mkdir("./file0", 0777) = 0 [pid 7365] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7365] chdir("./file0") = 0 [pid 7365] ioctl(4, LOOP_CLR_FD) = 0 [pid 7365] close(4) = 0 [pid 7365] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7364] <... futex resumed>) = 0 [pid 7365] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7364] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7365] <... futex resumed>) = 0 [pid 7364] <... futex resumed>) = 1 [pid 7365] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7364] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7365] <... openat resumed>) = 4 [pid 7365] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7365] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7364] <... futex resumed>) = 0 [pid 7364] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7365] <... futex resumed>) = 0 [pid 7364] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7365] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7365] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7365] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7364] <... futex resumed>) = 0 [pid 7364] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7365] <... futex resumed>) = 0 [pid 7364] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 245.086838][ T7365] loop0: detected capacity change from 0 to 4096 [ 245.107428][ T7365] ntfs: volume version 3.1. [pid 7365] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7364] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7364] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7364] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7364] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7366 attached => {parent_tid=[2324]}, 88) = 2324 [pid 7364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7364] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7364] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7366] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7366] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7366] ftruncate(4, 0 [pid 7365] <... write resumed>) = 1048064 [pid 7365] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7365] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7366] <... ftruncate resumed>) = 0 [pid 7366] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7364] <... futex resumed>) = 0 [pid 7366] <... futex resumed>) = 1 [pid 7364] close(3 [pid 7366] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7364] <... close resumed>) = 0 [pid 7364] close(4) = 0 [pid 7364] close(5) = 0 [pid 7364] close(6) = -1 EBADF (Bad file descriptor) [pid 7364] close(7) = -1 EBADF (Bad file descriptor) [pid 7364] close(8) = -1 EBADF (Bad file descriptor) [pid 7364] close(9) = -1 EBADF (Bad file descriptor) [pid 7364] close(10) = -1 EBADF (Bad file descriptor) [pid 7364] close(11) = -1 EBADF (Bad file descriptor) [pid 7364] close(12) = -1 EBADF (Bad file descriptor) [pid 7364] close(13) = -1 EBADF (Bad file descriptor) [pid 7364] close(14) = -1 EBADF (Bad file descriptor) [pid 7364] close(15) = -1 EBADF (Bad file descriptor) [pid 7364] close(16) = -1 EBADF (Bad file descriptor) [pid 7364] close(17) = -1 EBADF (Bad file descriptor) [pid 7364] close(18) = -1 EBADF (Bad file descriptor) [pid 7364] close(19) = -1 EBADF (Bad file descriptor) [pid 7364] close(20) = -1 EBADF (Bad file descriptor) [pid 7364] close(21) = -1 EBADF (Bad file descriptor) [pid 7364] close(22) = -1 EBADF (Bad file descriptor) [pid 7364] close(23) = -1 EBADF (Bad file descriptor) [pid 7364] close(24) = -1 EBADF (Bad file descriptor) [pid 7364] close(25) = -1 EBADF (Bad file descriptor) [pid 7364] close(26) = -1 EBADF (Bad file descriptor) [pid 7364] close(27) = -1 EBADF (Bad file descriptor) [pid 7364] close(28) = -1 EBADF (Bad file descriptor) [pid 7364] close(29) = -1 EBADF (Bad file descriptor) [pid 7364] exit_group(0) = ? [pid 7366] <... futex resumed>) = ? [pid 7365] <... futex resumed>) = ? [pid 7366] +++ exited with 0 +++ [pid 7365] +++ exited with 0 +++ [pid 7364] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2322, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./780", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./780", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./780/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./780/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./780/cgroup.cpu") = 0 [pid 5028] umount2("./780/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./780/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./780/binderfs") = 0 [pid 5028] umount2("./780/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./780/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./780/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./780/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./780/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./780/file0") = 0 [pid 5028] umount2("./780/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./780/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./780/cgroup") = 0 [pid 5028] umount2("./780/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./780/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./780/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./780") = 0 [pid 5028] mkdir("./781", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7367 attached [pid 7367] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2325 [pid 7367] <... set_robust_list resumed>) = 0 [pid 7367] chdir("./781") = 0 [pid 7367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7367] setpgid(0, 0) = 0 [pid 7367] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7367] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7367] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7367] write(3, "1000", 4) = 4 [pid 7367] close(3) = 0 [pid 7367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7367] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7367] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7367] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7368 attached => {parent_tid=[2326]}, 88) = 2326 [pid 7368] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7367] rt_sigprocmask(SIG_SETMASK, [], [pid 7368] set_robust_list(0x7feeffcce9a0, 24 [pid 7367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7368] <... set_robust_list resumed>) = 0 [pid 7368] rt_sigprocmask(SIG_SETMASK, [], [pid 7367] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7368] memfd_create("syzkaller", 0 [pid 7367] <... futex resumed>) = 0 [pid 7368] <... memfd_create resumed>) = 3 [pid 7367] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7368] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7368] munmap(0x7feef78ae000, 2097152) = 0 [pid 7368] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7368] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7368] close(3) = 0 [pid 7368] mkdir("./file0", 0777) = 0 [pid 7368] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7368] chdir("./file0") = 0 [pid 7368] ioctl(4, LOOP_CLR_FD) = 0 [pid 7368] close(4) = 0 [pid 7368] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7368] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] <... futex resumed>) = 0 [pid 7367] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] <... futex resumed>) = 0 [pid 7367] <... futex resumed>) = 1 [pid 7368] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7367] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7368] <... openat resumed>) = 4 [pid 7368] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7367] <... futex resumed>) = 0 [pid 7368] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7367] <... futex resumed>) = 0 [pid 7368] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7367] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7368] <... openat resumed>) = 5 [pid 7368] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7367] <... futex resumed>) = 0 [pid 7368] <... futex resumed>) = 1 [pid 7367] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7368] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7367] <... futex resumed>) = 0 [ 245.320434][ T7368] loop0: detected capacity change from 0 to 4096 [ 245.341052][ T7368] ntfs: volume version 3.1. [pid 7367] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7367] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7367] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2327]}, 88) = 2327 ./strace-static-x86_64: Process 7369 attached [pid 7367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7369] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7367] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7369] <... rseq resumed>) = 0 [pid 7367] <... futex resumed>) = 0 [pid 7367] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7369] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7369] ftruncate(4, 0) = 0 [pid 7368] <... write resumed>) = 1048064 [pid 7368] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7368] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7369] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7367] <... futex resumed>) = 0 [pid 7369] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7367] close(3) = 0 [pid 7367] close(4) = 0 [pid 7367] close(5) = 0 [pid 7367] close(6) = -1 EBADF (Bad file descriptor) [pid 7367] close(7) = -1 EBADF (Bad file descriptor) [pid 7367] close(8) = -1 EBADF (Bad file descriptor) [pid 7367] close(9) = -1 EBADF (Bad file descriptor) [pid 7367] close(10) = -1 EBADF (Bad file descriptor) [pid 7367] close(11) = -1 EBADF (Bad file descriptor) [pid 7367] close(12) = -1 EBADF (Bad file descriptor) [pid 7367] close(13) = -1 EBADF (Bad file descriptor) [pid 7367] close(14) = -1 EBADF (Bad file descriptor) [pid 7367] close(15) = -1 EBADF (Bad file descriptor) [pid 7367] close(16) = -1 EBADF (Bad file descriptor) [pid 7367] close(17) = -1 EBADF (Bad file descriptor) [pid 7367] close(18) = -1 EBADF (Bad file descriptor) [pid 7367] close(19) = -1 EBADF (Bad file descriptor) [pid 7367] close(20) = -1 EBADF (Bad file descriptor) [pid 7367] close(21) = -1 EBADF (Bad file descriptor) [pid 7367] close(22) = -1 EBADF (Bad file descriptor) [pid 7367] close(23) = -1 EBADF (Bad file descriptor) [pid 7367] close(24) = -1 EBADF (Bad file descriptor) [pid 7367] close(25) = -1 EBADF (Bad file descriptor) [pid 7367] close(26) = -1 EBADF (Bad file descriptor) [pid 7367] close(27) = -1 EBADF (Bad file descriptor) [pid 7367] close(28) = -1 EBADF (Bad file descriptor) [pid 7367] close(29) = -1 EBADF (Bad file descriptor) [pid 7367] exit_group(0) = ? [pid 7368] <... futex resumed>) = ? [pid 7369] <... futex resumed>) = ? [pid 7368] +++ exited with 0 +++ [pid 7369] +++ exited with 0 +++ [pid 7367] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2325, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./781", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./781", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./781/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./781/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./781/cgroup.cpu") = 0 [pid 5028] umount2("./781/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./781/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./781/binderfs") = 0 [pid 5028] umount2("./781/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./781/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./781/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./781/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./781/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./781/file0") = 0 [pid 5028] umount2("./781/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./781/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./781/cgroup") = 0 [pid 5028] umount2("./781/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./781/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./781/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./781") = 0 [pid 5028] mkdir("./782", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2328 ./strace-static-x86_64: Process 7370 attached [pid 7370] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7370] chdir("./782") = 0 [pid 7370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7370] setpgid(0, 0) = 0 [pid 7370] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7370] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7370] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7370] write(3, "1000", 4) = 4 [pid 7370] close(3) = 0 [pid 7370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7370] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7370] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7370] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7371 attached [pid 7371] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7370] <... clone3 resumed> => {parent_tid=[2329]}, 88) = 2329 [pid 7371] <... rseq resumed>) = 0 [pid 7370] rt_sigprocmask(SIG_SETMASK, [], [pid 7371] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7370] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] memfd_create("syzkaller", 0 [pid 7370] <... futex resumed>) = 0 [pid 7370] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7371] <... memfd_create resumed>) = 3 [pid 7371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7371] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7371] munmap(0x7feef78ae000, 2097152) = 0 [pid 7371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7371] close(3) = 0 [pid 7371] mkdir("./file0", 0777) = 0 [pid 7371] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7371] chdir("./file0") = 0 [pid 7371] ioctl(4, LOOP_CLR_FD) = 0 [pid 7371] close(4) = 0 [pid 7371] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7370] <... futex resumed>) = 0 [pid 7371] <... futex resumed>) = 1 [pid 7370] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7370] <... futex resumed>) = 0 [pid 7370] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7371] <... openat resumed>) = 4 [pid 7371] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7370] <... futex resumed>) = 0 [pid 7371] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7370] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7370] <... futex resumed>) = 0 [pid 7371] <... openat resumed>) = 5 [pid 7370] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7371] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7371] <... futex resumed>) = 0 [pid 7370] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7371] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7370] <... futex resumed>) = 0 [ 245.551874][ T7371] loop0: detected capacity change from 0 to 4096 [ 245.574337][ T7371] ntfs: volume version 3.1. [pid 7370] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7370] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7370] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7372 attached [pid 7372] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7370] <... clone3 resumed> => {parent_tid=[2330]}, 88) = 2330 [pid 7372] set_robust_list(0x7feef7aad9a0, 24 [pid 7370] rt_sigprocmask(SIG_SETMASK, [], [pid 7372] <... set_robust_list resumed>) = 0 [pid 7370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7372] rt_sigprocmask(SIG_SETMASK, [], [pid 7370] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7370] <... futex resumed>) = 0 [pid 7372] ftruncate(4, 0 [pid 7370] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7372] <... ftruncate resumed>) = 0 [pid 7372] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7372] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7370] <... futex resumed>) = 0 [pid 7371] <... write resumed>) = 1048064 [pid 7371] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7371] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7370] close(3) = 0 [pid 7370] close(4) = 0 [pid 7370] close(5) = 0 [pid 7370] close(6) = -1 EBADF (Bad file descriptor) [pid 7370] close(7) = -1 EBADF (Bad file descriptor) [pid 7370] close(8) = -1 EBADF (Bad file descriptor) [pid 7370] close(9) = -1 EBADF (Bad file descriptor) [pid 7370] close(10) = -1 EBADF (Bad file descriptor) [pid 7370] close(11) = -1 EBADF (Bad file descriptor) [pid 7370] close(12) = -1 EBADF (Bad file descriptor) [pid 7370] close(13) = -1 EBADF (Bad file descriptor) [pid 7370] close(14) = -1 EBADF (Bad file descriptor) [pid 7370] close(15) = -1 EBADF (Bad file descriptor) [pid 7370] close(16) = -1 EBADF (Bad file descriptor) [pid 7370] close(17) = -1 EBADF (Bad file descriptor) [pid 7370] close(18) = -1 EBADF (Bad file descriptor) [pid 7370] close(19) = -1 EBADF (Bad file descriptor) [pid 7370] close(20) = -1 EBADF (Bad file descriptor) [pid 7370] close(21) = -1 EBADF (Bad file descriptor) [pid 7370] close(22) = -1 EBADF (Bad file descriptor) [pid 7370] close(23) = -1 EBADF (Bad file descriptor) [pid 7370] close(24) = -1 EBADF (Bad file descriptor) [pid 7370] close(25) = -1 EBADF (Bad file descriptor) [pid 7370] close(26) = -1 EBADF (Bad file descriptor) [pid 7370] close(27) = -1 EBADF (Bad file descriptor) [pid 7370] close(28) = -1 EBADF (Bad file descriptor) [pid 7370] close(29) = -1 EBADF (Bad file descriptor) [pid 7370] exit_group(0) = ? [pid 7372] <... futex resumed>) = ? [pid 7371] <... futex resumed>) = ? [pid 7372] +++ exited with 0 +++ [pid 7371] +++ exited with 0 +++ [pid 7370] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2328, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./782", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./782", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./782/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./782/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./782/cgroup.cpu") = 0 [pid 5028] umount2("./782/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./782/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./782/binderfs") = 0 [pid 5028] umount2("./782/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./782/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./782/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./782/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./782/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./782/file0") = 0 [pid 5028] umount2("./782/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./782/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./782/cgroup") = 0 [pid 5028] umount2("./782/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./782/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./782/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./782") = 0 [pid 5028] mkdir("./783", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2331 ./strace-static-x86_64: Process 7373 attached [pid 7373] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7373] chdir("./783") = 0 [pid 7373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7373] setpgid(0, 0) = 0 [pid 7373] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7373] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7373] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7373] write(3, "1000", 4) = 4 [pid 7373] close(3) = 0 [pid 7373] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7373] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7373] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7373] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7373] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7374 attached => {parent_tid=[2332]}, 88) = 2332 [pid 7374] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7373] rt_sigprocmask(SIG_SETMASK, [], [pid 7374] <... rseq resumed>) = 0 [pid 7373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7374] set_robust_list(0x7feeffcce9a0, 24 [pid 7373] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] <... set_robust_list resumed>) = 0 [pid 7373] <... futex resumed>) = 0 [pid 7374] rt_sigprocmask(SIG_SETMASK, [], [pid 7373] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7374] memfd_create("syzkaller", 0) = 3 [pid 7374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7374] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7374] munmap(0x7feef78ae000, 2097152) = 0 [pid 7374] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7374] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7374] close(3) = 0 [pid 7374] mkdir("./file0", 0777) = 0 [pid 7374] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7374] chdir("./file0") = 0 [pid 7374] ioctl(4, LOOP_CLR_FD) = 0 [pid 7374] close(4) = 0 [pid 7374] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7374] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7373] <... futex resumed>) = 0 [pid 7373] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] <... futex resumed>) = 0 [pid 7373] <... futex resumed>) = 1 [pid 7374] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7373] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7374] <... openat resumed>) = 4 [pid 7374] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7373] <... futex resumed>) = 0 [pid 7374] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7373] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7373] <... futex resumed>) = 0 [pid 7374] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7373] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7374] <... openat resumed>) = 5 [pid 7374] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7374] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7373] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7374] <... futex resumed>) = 0 [pid 7373] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 245.790641][ T7374] loop0: detected capacity change from 0 to 4096 [ 245.811253][ T7374] ntfs: volume version 3.1. [pid 7374] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7373] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7373] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7373] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7373] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7373] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7373] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7375 attached [pid 7375] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7373] <... clone3 resumed> => {parent_tid=[2333]}, 88) = 2333 [pid 7373] rt_sigprocmask(SIG_SETMASK, [], [pid 7375] set_robust_list(0x7feef7aad9a0, 24 [pid 7373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7375] <... set_robust_list resumed>) = 0 [pid 7373] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7373] <... futex resumed>) = 0 [pid 7373] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7375] ftruncate(4, 0) = 0 [pid 7375] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7374] <... write resumed>) = 1048064 [pid 7375] <... futex resumed>) = 1 [pid 7374] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7373] <... futex resumed>) = 0 [pid 7375] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7374] <... futex resumed>) = 0 [pid 7373] close(3 [pid 7374] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7373] <... close resumed>) = 0 [pid 7373] close(4) = 0 [pid 7373] close(5) = 0 [pid 7373] close(6) = -1 EBADF (Bad file descriptor) [pid 7373] close(7) = -1 EBADF (Bad file descriptor) [pid 7373] close(8) = -1 EBADF (Bad file descriptor) [pid 7373] close(9) = -1 EBADF (Bad file descriptor) [pid 7373] close(10) = -1 EBADF (Bad file descriptor) [pid 7373] close(11) = -1 EBADF (Bad file descriptor) [pid 7373] close(12) = -1 EBADF (Bad file descriptor) [pid 7373] close(13) = -1 EBADF (Bad file descriptor) [pid 7373] close(14) = -1 EBADF (Bad file descriptor) [pid 7373] close(15) = -1 EBADF (Bad file descriptor) [pid 7373] close(16) = -1 EBADF (Bad file descriptor) [pid 7373] close(17) = -1 EBADF (Bad file descriptor) [pid 7373] close(18) = -1 EBADF (Bad file descriptor) [pid 7373] close(19) = -1 EBADF (Bad file descriptor) [pid 7373] close(20) = -1 EBADF (Bad file descriptor) [pid 7373] close(21) = -1 EBADF (Bad file descriptor) [pid 7373] close(22) = -1 EBADF (Bad file descriptor) [pid 7373] close(23) = -1 EBADF (Bad file descriptor) [pid 7373] close(24) = -1 EBADF (Bad file descriptor) [pid 7373] close(25) = -1 EBADF (Bad file descriptor) [pid 7373] close(26) = -1 EBADF (Bad file descriptor) [pid 7373] close(27) = -1 EBADF (Bad file descriptor) [pid 7373] close(28) = -1 EBADF (Bad file descriptor) [pid 7373] close(29) = -1 EBADF (Bad file descriptor) [pid 7373] exit_group(0) = ? [pid 7375] <... futex resumed>) = ? [pid 7374] <... futex resumed>) = ? [pid 7375] +++ exited with 0 +++ [pid 7374] +++ exited with 0 +++ [pid 7373] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2331, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./783", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./783", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./783/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./783/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./783/cgroup.cpu") = 0 [pid 5028] umount2("./783/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./783/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./783/binderfs") = 0 [pid 5028] umount2("./783/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./783/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./783/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./783/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./783/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./783/file0") = 0 [pid 5028] umount2("./783/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./783/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./783/cgroup") = 0 [pid 5028] umount2("./783/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./783/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./783/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./783") = 0 [pid 5028] mkdir("./784", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7376 attached , child_tidptr=0x5555563a5690) = 2334 [pid 7376] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7376] chdir("./784") = 0 [pid 7376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7376] setpgid(0, 0) = 0 [pid 7376] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7376] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7376] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7376] write(3, "1000", 4) = 4 [pid 7376] close(3) = 0 [pid 7376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7376] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7376] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7376] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2335]}, 88) = 2335 [pid 7376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7376] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7376] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7377 attached [pid 7377] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7377] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7377] memfd_create("syzkaller", 0) = 3 [pid 7377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7377] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7377] munmap(0x7feef78ae000, 2097152) = 0 [pid 7377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7377] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7377] close(3) = 0 [pid 7377] mkdir("./file0", 0777) = 0 [pid 7377] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7377] chdir("./file0") = 0 [pid 7377] ioctl(4, LOOP_CLR_FD) = 0 [pid 7377] close(4) = 0 [pid 7377] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7376] <... futex resumed>) = 0 [pid 7377] <... futex resumed>) = 1 [pid 7376] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7376] <... futex resumed>) = 0 [pid 7376] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7377] <... openat resumed>) = 4 [pid 7377] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7377] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7376] <... futex resumed>) = 0 [pid 7376] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7377] <... futex resumed>) = 0 [pid 7376] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7377] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7377] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7376] <... futex resumed>) = 0 [pid 7377] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7376] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7376] <... futex resumed>) = 0 [ 245.998745][ T7377] loop0: detected capacity change from 0 to 4096 [ 246.019347][ T7377] ntfs: volume version 3.1. [pid 7376] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7376] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7376] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7378 attached [pid 7378] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7376] <... clone3 resumed> => {parent_tid=[2336]}, 88) = 2336 [pid 7378] <... rseq resumed>) = 0 [pid 7376] rt_sigprocmask(SIG_SETMASK, [], [pid 7378] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7376] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7376] <... futex resumed>) = 0 [pid 7378] ftruncate(4, 0 [pid 7376] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7378] <... ftruncate resumed>) = 0 [pid 7378] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7377] <... write resumed>) = 1048064 [pid 7376] <... futex resumed>) = 0 [pid 7377] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7378] <... futex resumed>) = 1 [pid 7376] close(3 [pid 7377] <... futex resumed>) = 0 [pid 7376] <... close resumed>) = 0 [pid 7376] close(4) = 0 [pid 7376] close(5) = 0 [pid 7376] close(6) = -1 EBADF (Bad file descriptor) [pid 7376] close(7) = -1 EBADF (Bad file descriptor) [pid 7376] close(8 [pid 7378] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7376] close(9) = -1 EBADF (Bad file descriptor) [pid 7376] close(10) = -1 EBADF (Bad file descriptor) [pid 7376] close(11) = -1 EBADF (Bad file descriptor) [pid 7376] close(12) = -1 EBADF (Bad file descriptor) [pid 7376] close(13) = -1 EBADF (Bad file descriptor) [pid 7376] close(14) = -1 EBADF (Bad file descriptor) [pid 7376] close(15) = -1 EBADF (Bad file descriptor) [pid 7376] close(16) = -1 EBADF (Bad file descriptor) [pid 7376] close(17) = -1 EBADF (Bad file descriptor) [pid 7376] close(18) = -1 EBADF (Bad file descriptor) [pid 7376] close(19) = -1 EBADF (Bad file descriptor) [pid 7376] close(20) = -1 EBADF (Bad file descriptor) [pid 7376] close(21) = -1 EBADF (Bad file descriptor) [pid 7376] close(22) = -1 EBADF (Bad file descriptor) [pid 7376] close(23) = -1 EBADF (Bad file descriptor) [pid 7376] close(24) = -1 EBADF (Bad file descriptor) [pid 7376] close(25) = -1 EBADF (Bad file descriptor) [pid 7376] close(26) = -1 EBADF (Bad file descriptor) [pid 7376] close(27) = -1 EBADF (Bad file descriptor) [pid 7376] close(28) = -1 EBADF (Bad file descriptor) [pid 7376] close(29) = -1 EBADF (Bad file descriptor) [pid 7376] exit_group(0) = ? [pid 7378] <... futex resumed>) = ? [pid 7378] +++ exited with 0 +++ [pid 7377] +++ exited with 0 +++ [pid 7376] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2334, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./784", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./784", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./784/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./784/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./784/cgroup.cpu") = 0 [pid 5028] umount2("./784/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./784/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./784/binderfs") = 0 [pid 5028] umount2("./784/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./784/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./784/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./784/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./784/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./784/file0") = 0 [pid 5028] umount2("./784/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./784/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./784/cgroup") = 0 [pid 5028] umount2("./784/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./784/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./784/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./784") = 0 [pid 5028] mkdir("./785", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2337 ./strace-static-x86_64: Process 7379 attached [pid 7379] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7379] chdir("./785") = 0 [pid 7379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7379] setpgid(0, 0) = 0 [pid 7379] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7379] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7379] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7379] write(3, "1000", 4) = 4 [pid 7379] close(3) = 0 [pid 7379] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7379] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7379] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7379] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7379] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2338]}, 88) = 2338 [pid 7379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7379] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7379] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7380 attached [pid 7380] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7380] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7380] memfd_create("syzkaller", 0) = 3 [pid 7380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7380] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7380] munmap(0x7feef78ae000, 2097152) = 0 [pid 7380] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7380] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7380] close(3) = 0 [pid 7380] mkdir("./file0", 0777) = 0 [pid 7380] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7380] chdir("./file0") = 0 [pid 7380] ioctl(4, LOOP_CLR_FD) = 0 [pid 7380] close(4) = 0 [pid 7380] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7379] <... futex resumed>) = 0 [pid 7380] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7379] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7379] <... futex resumed>) = 0 [pid 7379] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7380] <... openat resumed>) = 4 [pid 7380] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7380] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7379] <... futex resumed>) = 0 [pid 7379] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7380] <... futex resumed>) = 0 [pid 7380] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7379] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7380] <... openat resumed>) = 5 [pid 7380] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7379] <... futex resumed>) = 0 [pid 7380] <... futex resumed>) = 1 [pid 7379] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7379] <... futex resumed>) = 0 [ 246.222564][ T7380] loop0: detected capacity change from 0 to 4096 [ 246.245095][ T7380] ntfs: volume version 3.1. [pid 7379] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7379] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7379] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7379] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7379] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7379] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7381 attached [pid 7381] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7379] <... clone3 resumed> => {parent_tid=[2339]}, 88) = 2339 [pid 7381] <... rseq resumed>) = 0 [pid 7379] rt_sigprocmask(SIG_SETMASK, [], [pid 7381] set_robust_list(0x7feef7aad9a0, 24 [pid 7379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7381] <... set_robust_list resumed>) = 0 [pid 7381] rt_sigprocmask(SIG_SETMASK, [], [pid 7379] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7379] <... futex resumed>) = 0 [pid 7379] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7381] ftruncate(4, 0) = 0 [pid 7380] <... write resumed>) = 1048064 [pid 7381] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7380] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7380] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7381] <... futex resumed>) = 1 [pid 7379] <... futex resumed>) = 0 [pid 7379] close(3) = 0 [pid 7379] close(4) = 0 [pid 7379] close(5) = 0 [pid 7379] close(6) = -1 EBADF (Bad file descriptor) [pid 7379] close(7) = -1 EBADF (Bad file descriptor) [pid 7379] close(8) = -1 EBADF (Bad file descriptor) [pid 7379] close(9) = -1 EBADF (Bad file descriptor) [pid 7379] close(10) = -1 EBADF (Bad file descriptor) [pid 7379] close(11) = -1 EBADF (Bad file descriptor) [pid 7379] close(12) = -1 EBADF (Bad file descriptor) [pid 7379] close(13) = -1 EBADF (Bad file descriptor) [pid 7379] close(14) = -1 EBADF (Bad file descriptor) [pid 7379] close(15) = -1 EBADF (Bad file descriptor) [pid 7379] close(16) = -1 EBADF (Bad file descriptor) [pid 7379] close(17) = -1 EBADF (Bad file descriptor) [pid 7379] close(18) = -1 EBADF (Bad file descriptor) [pid 7381] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7379] close(19) = -1 EBADF (Bad file descriptor) [pid 7379] close(20) = -1 EBADF (Bad file descriptor) [pid 7379] close(21) = -1 EBADF (Bad file descriptor) [pid 7379] close(22) = -1 EBADF (Bad file descriptor) [pid 7379] close(23) = -1 EBADF (Bad file descriptor) [pid 7379] close(24) = -1 EBADF (Bad file descriptor) [pid 7379] close(25) = -1 EBADF (Bad file descriptor) [pid 7379] close(26) = -1 EBADF (Bad file descriptor) [pid 7379] close(27) = -1 EBADF (Bad file descriptor) [pid 7379] close(28) = -1 EBADF (Bad file descriptor) [pid 7379] close(29) = -1 EBADF (Bad file descriptor) [pid 7379] exit_group(0) = ? [pid 7381] <... futex resumed>) = ? [pid 7381] +++ exited with 0 +++ [pid 7380] <... futex resumed>) = ? [pid 7380] +++ exited with 0 +++ [pid 7379] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2337, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./785", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./785", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./785/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./785/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./785/cgroup.cpu") = 0 [pid 5028] umount2("./785/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./785/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./785/binderfs") = 0 [pid 5028] umount2("./785/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./785/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./785/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./785/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./785/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./785/file0") = 0 [pid 5028] umount2("./785/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./785/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./785/cgroup") = 0 [pid 5028] umount2("./785/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./785/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./785/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./785") = 0 [pid 5028] mkdir("./786", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7382 attached , child_tidptr=0x5555563a5690) = 2340 [pid 7382] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7382] chdir("./786") = 0 [pid 7382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7382] setpgid(0, 0) = 0 [pid 7382] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7382] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7382] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7382] write(3, "1000", 4) = 4 [pid 7382] close(3) = 0 [pid 7382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7382] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7382] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7382] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2341]}, 88) = 2341 ./strace-static-x86_64: Process 7383 attached [pid 7383] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7383] set_robust_list(0x7feeffcce9a0, 24 [pid 7382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7382] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7382] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7383] <... set_robust_list resumed>) = 0 [pid 7383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7383] memfd_create("syzkaller", 0) = 3 [pid 7383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7383] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7383] munmap(0x7feef78ae000, 2097152) = 0 [pid 7383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7383] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7383] close(3) = 0 [pid 7383] mkdir("./file0", 0777) = 0 [pid 7383] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7383] chdir("./file0") = 0 [pid 7383] ioctl(4, LOOP_CLR_FD) = 0 [pid 7383] close(4) = 0 [pid 7383] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7382] <... futex resumed>) = 0 [pid 7383] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7382] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7382] <... futex resumed>) = 0 [pid 7382] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7383] <... openat resumed>) = 4 [pid 7383] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7382] <... futex resumed>) = 0 [pid 7383] <... futex resumed>) = 1 [pid 7382] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7383] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7382] <... futex resumed>) = 0 [pid 7383] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7382] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7383] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7382] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7382] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7383] <... futex resumed>) = 0 [pid 7382] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 246.433934][ T7383] loop0: detected capacity change from 0 to 4096 [ 246.455315][ T7383] ntfs: volume version 3.1. [pid 7383] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7382] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7382] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7384 attached [pid 7384] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7384] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7384] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7382] <... clone3 resumed> => {parent_tid=[2342]}, 88) = 2342 [pid 7382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7382] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7384] <... futex resumed>) = 0 [pid 7382] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7384] ftruncate(4, 0) = 0 [pid 7384] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7382] <... futex resumed>) = 0 [pid 7384] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7383] <... write resumed>) = 1048064 [pid 7383] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7383] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7382] close(3) = 0 [pid 7382] close(4) = 0 [pid 7382] close(5) = 0 [pid 7382] close(6) = -1 EBADF (Bad file descriptor) [pid 7382] close(7) = -1 EBADF (Bad file descriptor) [pid 7382] close(8) = -1 EBADF (Bad file descriptor) [pid 7382] close(9) = -1 EBADF (Bad file descriptor) [pid 7382] close(10) = -1 EBADF (Bad file descriptor) [pid 7382] close(11) = -1 EBADF (Bad file descriptor) [pid 7382] close(12) = -1 EBADF (Bad file descriptor) [pid 7382] close(13) = -1 EBADF (Bad file descriptor) [pid 7382] close(14) = -1 EBADF (Bad file descriptor) [pid 7382] close(15) = -1 EBADF (Bad file descriptor) [pid 7382] close(16) = -1 EBADF (Bad file descriptor) [pid 7382] close(17) = -1 EBADF (Bad file descriptor) [pid 7382] close(18) = -1 EBADF (Bad file descriptor) [pid 7382] close(19) = -1 EBADF (Bad file descriptor) [pid 7382] close(20) = -1 EBADF (Bad file descriptor) [pid 7382] close(21) = -1 EBADF (Bad file descriptor) [pid 7382] close(22) = -1 EBADF (Bad file descriptor) [pid 7382] close(23) = -1 EBADF (Bad file descriptor) [pid 7382] close(24) = -1 EBADF (Bad file descriptor) [pid 7382] close(25) = -1 EBADF (Bad file descriptor) [pid 7382] close(26) = -1 EBADF (Bad file descriptor) [pid 7382] close(27) = -1 EBADF (Bad file descriptor) [pid 7382] close(28) = -1 EBADF (Bad file descriptor) [pid 7382] close(29) = -1 EBADF (Bad file descriptor) [pid 7382] exit_group(0 [pid 7384] <... futex resumed>) = ? [pid 7383] <... futex resumed>) = ? [pid 7384] +++ exited with 0 +++ [pid 7382] <... exit_group resumed>) = ? [pid 7383] +++ exited with 0 +++ [pid 7382] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2340, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5028] umount2("./786", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./786", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./786/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./786/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./786/cgroup.cpu") = 0 [pid 5028] umount2("./786/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./786/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./786/binderfs") = 0 [pid 5028] umount2("./786/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./786/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./786/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./786/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./786/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./786/file0") = 0 [pid 5028] umount2("./786/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./786/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./786/cgroup") = 0 [pid 5028] umount2("./786/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./786/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./786/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./786") = 0 [pid 5028] mkdir("./787", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2343 ./strace-static-x86_64: Process 7385 attached [pid 7385] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7385] chdir("./787") = 0 [pid 7385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7385] setpgid(0, 0) = 0 [pid 7385] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7385] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7385] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7385] write(3, "1000", 4) = 4 [pid 7385] close(3) = 0 [pid 7385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7385] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7385] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7385] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7386 attached => {parent_tid=[2344]}, 88) = 2344 [pid 7386] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7385] rt_sigprocmask(SIG_SETMASK, [], [pid 7386] <... rseq resumed>) = 0 [pid 7386] set_robust_list(0x7feeffcce9a0, 24 [pid 7385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7386] <... set_robust_list resumed>) = 0 [pid 7385] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] rt_sigprocmask(SIG_SETMASK, [], [pid 7385] <... futex resumed>) = 0 [pid 7386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7385] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7386] memfd_create("syzkaller", 0) = 3 [pid 7386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7386] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7386] munmap(0x7feef78ae000, 2097152) = 0 [pid 7386] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7386] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7386] close(3) = 0 [pid 7386] mkdir("./file0", 0777) = 0 [pid 7386] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7386] chdir("./file0") = 0 [pid 7386] ioctl(4, LOOP_CLR_FD) = 0 [pid 7386] close(4) = 0 [pid 7386] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7386] <... futex resumed>) = 1 [pid 7385] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7386] <... openat resumed>) = 4 [pid 7386] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7386] <... futex resumed>) = 1 [pid 7385] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7385] <... futex resumed>) = 0 [pid 7386] <... openat resumed>) = 5 [pid 7385] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7386] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7385] <... futex resumed>) = 0 [pid 7385] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] <... futex resumed>) = 1 [pid 7385] <... futex resumed>) = 0 [pid 7386] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 246.641937][ T7386] loop0: detected capacity change from 0 to 4096 [ 246.662755][ T7386] ntfs: volume version 3.1. [pid 7385] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7385] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7385] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7387 attached [pid 7387] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7385] <... clone3 resumed> => {parent_tid=[2345]}, 88) = 2345 [pid 7385] rt_sigprocmask(SIG_SETMASK, [], [pid 7387] set_robust_list(0x7feef7aad9a0, 24 [pid 7385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7385] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] <... set_robust_list resumed>) = 0 [pid 7387] rt_sigprocmask(SIG_SETMASK, [], [pid 7385] <... futex resumed>) = 0 [pid 7387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7385] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7387] ftruncate(4, 0) = 0 [pid 7386] <... write resumed>) = 1048064 [pid 7387] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7386] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7387] <... futex resumed>) = 1 [pid 7386] <... futex resumed>) = 0 [pid 7387] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7386] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7385] <... futex resumed>) = 0 [pid 7385] close(3) = 0 [pid 7385] close(4) = 0 [pid 7385] close(5) = 0 [pid 7385] close(6) = -1 EBADF (Bad file descriptor) [pid 7385] close(7) = -1 EBADF (Bad file descriptor) [pid 7385] close(8) = -1 EBADF (Bad file descriptor) [pid 7385] close(9) = -1 EBADF (Bad file descriptor) [pid 7385] close(10) = -1 EBADF (Bad file descriptor) [pid 7385] close(11) = -1 EBADF (Bad file descriptor) [pid 7385] close(12) = -1 EBADF (Bad file descriptor) [pid 7385] close(13) = -1 EBADF (Bad file descriptor) [pid 7385] close(14) = -1 EBADF (Bad file descriptor) [pid 7385] close(15) = -1 EBADF (Bad file descriptor) [pid 7385] close(16) = -1 EBADF (Bad file descriptor) [pid 7385] close(17) = -1 EBADF (Bad file descriptor) [pid 7385] close(18) = -1 EBADF (Bad file descriptor) [pid 7385] close(19) = -1 EBADF (Bad file descriptor) [pid 7385] close(20) = -1 EBADF (Bad file descriptor) [pid 7385] close(21) = -1 EBADF (Bad file descriptor) [pid 7385] close(22) = -1 EBADF (Bad file descriptor) [pid 7385] close(23) = -1 EBADF (Bad file descriptor) [pid 7385] close(24) = -1 EBADF (Bad file descriptor) [pid 7385] close(25) = -1 EBADF (Bad file descriptor) [pid 7385] close(26) = -1 EBADF (Bad file descriptor) [pid 7385] close(27) = -1 EBADF (Bad file descriptor) [pid 7385] close(28) = -1 EBADF (Bad file descriptor) [pid 7385] close(29) = -1 EBADF (Bad file descriptor) [pid 7385] exit_group(0) = ? [pid 7386] <... futex resumed>) = ? [pid 7387] <... futex resumed>) = ? [pid 7386] +++ exited with 0 +++ [pid 7387] +++ exited with 0 +++ [pid 7385] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2343, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./787", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./787", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./787/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./787/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./787/cgroup.cpu") = 0 [pid 5028] umount2("./787/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./787/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./787/binderfs") = 0 [pid 5028] umount2("./787/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./787/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./787/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./787/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./787/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./787/file0") = 0 [pid 5028] umount2("./787/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./787/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./787/cgroup") = 0 [pid 5028] umount2("./787/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./787/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./787/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./787") = 0 [pid 5028] mkdir("./788", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7388 attached , child_tidptr=0x5555563a5690) = 2346 [pid 7388] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7388] chdir("./788") = 0 [pid 7388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7388] setpgid(0, 0) = 0 [pid 7388] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7388] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7388] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7388] write(3, "1000", 4) = 4 [pid 7388] close(3) = 0 [pid 7388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7388] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7388] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7388] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7389 attached [pid 7389] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7388] <... clone3 resumed> => {parent_tid=[2347]}, 88) = 2347 [pid 7389] <... rseq resumed>) = 0 [pid 7388] rt_sigprocmask(SIG_SETMASK, [], [pid 7389] set_robust_list(0x7feeffcce9a0, 24 [pid 7388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7389] <... set_robust_list resumed>) = 0 [pid 7388] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7388] <... futex resumed>) = 0 [pid 7388] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7389] memfd_create("syzkaller", 0) = 3 [pid 7389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7389] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7389] munmap(0x7feef78ae000, 2097152) = 0 [pid 7389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7389] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7389] close(3) = 0 [pid 7389] mkdir("./file0", 0777) = 0 [ 246.841603][ T7389] loop0: detected capacity change from 0 to 4096 [ 246.850598][ T7389] __ntfs_warning: 12 callbacks suppressed [ 246.850612][ T7389] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7389] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7389] chdir("./file0") = 0 [pid 7389] ioctl(4, LOOP_CLR_FD) = 0 [pid 7389] close(4) = 0 [pid 7389] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7388] <... futex resumed>) = 0 [pid 7389] <... futex resumed>) = 1 [pid 7388] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7389] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7388] <... futex resumed>) = 0 [pid 7388] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7389] <... openat resumed>) = 4 [pid 7389] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7388] <... futex resumed>) = 0 [pid 7389] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7388] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7389] <... futex resumed>) = 0 [pid 7388] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7389] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7389] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7388] <... futex resumed>) = 0 [pid 7389] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7388] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7388] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 246.889254][ T7389] ntfs: volume version 3.1. [pid 7389] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7388] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7388] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7388] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7390 attached => {parent_tid=[2348]}, 88) = 2348 [pid 7390] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7388] rt_sigprocmask(SIG_SETMASK, [], [pid 7390] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7390] rt_sigprocmask(SIG_SETMASK, [], [pid 7388] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7390] ftruncate(4, 0 [pid 7388] <... futex resumed>) = 0 [pid 7388] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7390] <... ftruncate resumed>) = 0 [pid 7389] <... write resumed>) = 1048064 [pid 7390] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7389] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7390] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7389] <... futex resumed>) = 0 [pid 7389] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7388] <... futex resumed>) = 0 [pid 7388] close(3) = 0 [pid 7388] close(4) = 0 [pid 7388] close(5) = 0 [pid 7388] close(6) = -1 EBADF (Bad file descriptor) [pid 7388] close(7) = -1 EBADF (Bad file descriptor) [pid 7388] close(8) = -1 EBADF (Bad file descriptor) [pid 7388] close(9) = -1 EBADF (Bad file descriptor) [pid 7388] close(10) = -1 EBADF (Bad file descriptor) [pid 7388] close(11) = -1 EBADF (Bad file descriptor) [pid 7388] close(12) = -1 EBADF (Bad file descriptor) [pid 7388] close(13) = -1 EBADF (Bad file descriptor) [pid 7388] close(14) = -1 EBADF (Bad file descriptor) [pid 7388] close(15) = -1 EBADF (Bad file descriptor) [pid 7388] close(16) = -1 EBADF (Bad file descriptor) [pid 7388] close(17) = -1 EBADF (Bad file descriptor) [pid 7388] close(18) = -1 EBADF (Bad file descriptor) [pid 7388] close(19) = -1 EBADF (Bad file descriptor) [pid 7388] close(20) = -1 EBADF (Bad file descriptor) [pid 7388] close(21) = -1 EBADF (Bad file descriptor) [pid 7388] close(22) = -1 EBADF (Bad file descriptor) [pid 7388] close(23) = -1 EBADF (Bad file descriptor) [pid 7388] close(24) = -1 EBADF (Bad file descriptor) [pid 7388] close(25) = -1 EBADF (Bad file descriptor) [pid 7388] close(26) = -1 EBADF (Bad file descriptor) [pid 7388] close(27) = -1 EBADF (Bad file descriptor) [pid 7388] close(28) = -1 EBADF (Bad file descriptor) [pid 7388] close(29) = -1 EBADF (Bad file descriptor) [pid 7388] exit_group(0) = ? [pid 7389] <... futex resumed>) = ? [pid 7390] <... futex resumed>) = ? [pid 7389] +++ exited with 0 +++ [pid 7390] +++ exited with 0 +++ [pid 7388] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2346, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./788", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./788", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./788/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./788/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./788/cgroup.cpu") = 0 [pid 5028] umount2("./788/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./788/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./788/binderfs") = 0 [pid 5028] umount2("./788/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./788/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./788/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./788/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./788/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./788/file0") = 0 [pid 5028] umount2("./788/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./788/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./788/cgroup") = 0 [pid 5028] umount2("./788/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./788/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./788/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./788") = 0 [pid 5028] mkdir("./789", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7391 attached , child_tidptr=0x5555563a5690) = 2349 [pid 7391] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7391] chdir("./789") = 0 [pid 7391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7391] setpgid(0, 0) = 0 [pid 7391] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7391] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7391] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7391] write(3, "1000", 4) = 4 [pid 7391] close(3) = 0 [pid 7391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7391] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7391] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7391] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7392 attached [pid 7392] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7391] <... clone3 resumed> => {parent_tid=[2350]}, 88) = 2350 [pid 7392] <... rseq resumed>) = 0 [pid 7391] rt_sigprocmask(SIG_SETMASK, [], [pid 7392] set_robust_list(0x7feeffcce9a0, 24 [pid 7391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7392] <... set_robust_list resumed>) = 0 [pid 7392] rt_sigprocmask(SIG_SETMASK, [], [pid 7391] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7391] <... futex resumed>) = 0 [pid 7392] memfd_create("syzkaller", 0 [pid 7391] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7392] <... memfd_create resumed>) = 3 [pid 7392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7392] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7392] munmap(0x7feef78ae000, 2097152) = 0 [pid 7392] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7392] close(3) = 0 [pid 7392] mkdir("./file0", 0777) = 0 [pid 7392] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7392] chdir("./file0") = 0 [pid 7392] ioctl(4, LOOP_CLR_FD) = 0 [pid 7392] close(4) = 0 [pid 7392] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7391] <... futex resumed>) = 0 [pid 7391] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7392] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7391] <... futex resumed>) = 0 [pid 7391] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7392] <... openat resumed>) = 4 [pid 7392] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7391] <... futex resumed>) = 0 [pid 7392] <... futex resumed>) = 1 [pid 7392] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7391] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7392] <... openat resumed>) = 5 [pid 7392] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7391] <... futex resumed>) = 0 [pid 7392] <... futex resumed>) = 0 [pid 7392] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7391] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7391] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7392] <... futex resumed>) = 0 [pid 7392] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7391] <... futex resumed>) = 1 [ 247.098369][ T7392] loop0: detected capacity change from 0 to 4096 [ 247.107808][ T7392] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 247.140644][ T7392] ntfs: volume version 3.1. [pid 7391] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7391] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7391] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7393 attached [pid 7393] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7391] <... clone3 resumed> => {parent_tid=[2351]}, 88) = 2351 [pid 7393] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7391] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7393] ftruncate(4, 0 [pid 7391] <... futex resumed>) = 0 [pid 7393] <... ftruncate resumed>) = 0 [pid 7391] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7393] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7392] <... write resumed>) = 1048064 [pid 7391] <... futex resumed>) = 0 [pid 7393] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7392] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7391] close(3 [pid 7392] <... futex resumed>) = 0 [pid 7391] <... close resumed>) = 0 [pid 7392] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7391] close(4) = 0 [pid 7391] close(5) = 0 [pid 7391] close(6) = -1 EBADF (Bad file descriptor) [pid 7391] close(7) = -1 EBADF (Bad file descriptor) [pid 7391] close(8) = -1 EBADF (Bad file descriptor) [pid 7391] close(9) = -1 EBADF (Bad file descriptor) [pid 7391] close(10) = -1 EBADF (Bad file descriptor) [pid 7391] close(11) = -1 EBADF (Bad file descriptor) [pid 7391] close(12) = -1 EBADF (Bad file descriptor) [pid 7391] close(13) = -1 EBADF (Bad file descriptor) [pid 7391] close(14) = -1 EBADF (Bad file descriptor) [pid 7391] close(15) = -1 EBADF (Bad file descriptor) [pid 7391] close(16) = -1 EBADF (Bad file descriptor) [pid 7391] close(17) = -1 EBADF (Bad file descriptor) [pid 7391] close(18) = -1 EBADF (Bad file descriptor) [pid 7391] close(19) = -1 EBADF (Bad file descriptor) [pid 7391] close(20) = -1 EBADF (Bad file descriptor) [pid 7391] close(21) = -1 EBADF (Bad file descriptor) [pid 7391] close(22) = -1 EBADF (Bad file descriptor) [pid 7391] close(23) = -1 EBADF (Bad file descriptor) [pid 7391] close(24) = -1 EBADF (Bad file descriptor) [pid 7391] close(25) = -1 EBADF (Bad file descriptor) [pid 7391] close(26) = -1 EBADF (Bad file descriptor) [pid 7391] close(27) = -1 EBADF (Bad file descriptor) [pid 7391] close(28) = -1 EBADF (Bad file descriptor) [pid 7391] close(29) = -1 EBADF (Bad file descriptor) [pid 7391] exit_group(0) = ? [pid 7393] <... futex resumed>) = ? [pid 7392] <... futex resumed>) = ? [pid 7393] +++ exited with 0 +++ [pid 7392] +++ exited with 0 +++ [pid 7391] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2349, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./789", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./789", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./789/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./789/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./789/cgroup.cpu") = 0 [pid 5028] umount2("./789/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./789/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./789/binderfs") = 0 [pid 5028] umount2("./789/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./789/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./789/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./789/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./789/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./789/file0") = 0 [pid 5028] umount2("./789/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./789/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./789/cgroup") = 0 [pid 5028] umount2("./789/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./789/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./789/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./789") = 0 [pid 5028] mkdir("./790", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2352 ./strace-static-x86_64: Process 7394 attached [pid 7394] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7394] chdir("./790") = 0 [pid 7394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7394] setpgid(0, 0) = 0 [pid 7394] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7394] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7394] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7394] write(3, "1000", 4) = 4 [pid 7394] close(3) = 0 [pid 7394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7394] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7394] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7394] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7395 attached [pid 7395] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7394] <... clone3 resumed> => {parent_tid=[2353]}, 88) = 2353 [pid 7395] <... rseq resumed>) = 0 [pid 7394] rt_sigprocmask(SIG_SETMASK, [], [pid 7395] set_robust_list(0x7feeffcce9a0, 24 [pid 7394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7395] <... set_robust_list resumed>) = 0 [pid 7394] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7395] rt_sigprocmask(SIG_SETMASK, [], [pid 7394] <... futex resumed>) = 0 [pid 7395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7394] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7395] memfd_create("syzkaller", 0) = 3 [pid 7395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7395] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7395] munmap(0x7feef78ae000, 2097152) = 0 [pid 7395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7395] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7395] close(3) = 0 [pid 7395] mkdir("./file0", 0777) = 0 [pid 7395] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7395] chdir("./file0") = 0 [pid 7395] ioctl(4, LOOP_CLR_FD) = 0 [pid 7395] close(4) = 0 [pid 7395] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7394] <... futex resumed>) = 0 [pid 7395] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7394] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7394] <... futex resumed>) = 0 [pid 7395] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7394] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7395] <... openat resumed>) = 4 [pid 7395] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7394] <... futex resumed>) = 0 [pid 7395] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7394] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7394] <... futex resumed>) = 0 [pid 7395] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7394] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7395] <... openat resumed>) = 5 [pid 7395] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7394] <... futex resumed>) = 0 [pid 7394] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7394] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7395] <... futex resumed>) = 1 [ 247.342632][ T7395] loop0: detected capacity change from 0 to 4096 [ 247.351649][ T7395] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 247.383325][ T7395] ntfs: volume version 3.1. [pid 7395] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7394] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7394] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7396 attached [pid 7396] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7394] <... clone3 resumed> => {parent_tid=[2354]}, 88) = 2354 [pid 7394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7394] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7396] set_robust_list(0x7feef7aad9a0, 24 [pid 7394] <... futex resumed>) = 0 [pid 7396] <... set_robust_list resumed>) = 0 [pid 7394] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7396] ftruncate(4, 0 [pid 7395] <... write resumed>) = 1048064 [pid 7395] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7395] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7396] <... ftruncate resumed>) = 0 [pid 7396] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7394] <... futex resumed>) = 0 [pid 7396] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7394] close(3) = 0 [pid 7394] close(4) = 0 [pid 7394] close(5) = 0 [pid 7394] close(6) = -1 EBADF (Bad file descriptor) [pid 7394] close(7) = -1 EBADF (Bad file descriptor) [pid 7394] close(8) = -1 EBADF (Bad file descriptor) [pid 7394] close(9) = -1 EBADF (Bad file descriptor) [pid 7394] close(10) = -1 EBADF (Bad file descriptor) [pid 7394] close(11) = -1 EBADF (Bad file descriptor) [pid 7394] close(12) = -1 EBADF (Bad file descriptor) [pid 7394] close(13) = -1 EBADF (Bad file descriptor) [pid 7394] close(14) = -1 EBADF (Bad file descriptor) [pid 7394] close(15) = -1 EBADF (Bad file descriptor) [pid 7394] close(16) = -1 EBADF (Bad file descriptor) [pid 7394] close(17) = -1 EBADF (Bad file descriptor) [pid 7394] close(18) = -1 EBADF (Bad file descriptor) [pid 7394] close(19) = -1 EBADF (Bad file descriptor) [pid 7394] close(20) = -1 EBADF (Bad file descriptor) [pid 7394] close(21) = -1 EBADF (Bad file descriptor) [pid 7394] close(22) = -1 EBADF (Bad file descriptor) [pid 7394] close(23) = -1 EBADF (Bad file descriptor) [pid 7394] close(24) = -1 EBADF (Bad file descriptor) [pid 7394] close(25) = -1 EBADF (Bad file descriptor) [pid 7394] close(26) = -1 EBADF (Bad file descriptor) [pid 7394] close(27) = -1 EBADF (Bad file descriptor) [pid 7394] close(28) = -1 EBADF (Bad file descriptor) [pid 7394] close(29) = -1 EBADF (Bad file descriptor) [pid 7394] exit_group(0) = ? [pid 7395] <... futex resumed>) = ? [pid 7396] <... futex resumed>) = ? [pid 7395] +++ exited with 0 +++ [pid 7396] +++ exited with 0 +++ [pid 7394] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2352, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./790", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./790", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./790/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./790/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./790/cgroup.cpu") = 0 [pid 5028] umount2("./790/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./790/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./790/binderfs") = 0 [pid 5028] umount2("./790/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./790/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./790/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./790/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./790/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./790/file0") = 0 [pid 5028] umount2("./790/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./790/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./790/cgroup") = 0 [pid 5028] umount2("./790/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./790/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./790/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./790") = 0 [pid 5028] mkdir("./791", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2355 ./strace-static-x86_64: Process 7397 attached [pid 7397] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7397] chdir("./791") = 0 [pid 7397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7397] setpgid(0, 0) = 0 [pid 7397] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7397] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7397] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7397] write(3, "1000", 4) = 4 [pid 7397] close(3) = 0 [pid 7397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7397] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7397] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7397] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7397] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7398 attached => {parent_tid=[2356]}, 88) = 2356 [pid 7397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7397] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7397] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7398] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7398] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7398] memfd_create("syzkaller", 0) = 3 [pid 7398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7398] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7398] munmap(0x7feef78ae000, 2097152) = 0 [pid 7398] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7398] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7398] close(3) = 0 [pid 7398] mkdir("./file0", 0777) = 0 [pid 7398] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7398] chdir("./file0") = 0 [pid 7398] ioctl(4, LOOP_CLR_FD) = 0 [pid 7398] close(4) = 0 [pid 7398] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7398] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7397] <... futex resumed>) = 0 [pid 7397] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7398] <... futex resumed>) = 0 [pid 7397] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7398] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7398] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7397] <... futex resumed>) = 0 [pid 7398] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7397] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7397] <... futex resumed>) = 0 [pid 7398] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7398] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7397] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7398] <... futex resumed>) = 0 [pid 7397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7398] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7397] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 247.603649][ T7398] loop0: detected capacity change from 0 to 4096 [ 247.613609][ T7398] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 247.648921][ T7398] ntfs: volume version 3.1. [pid 7397] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7397] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7397] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7399 attached [pid 7399] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7397] <... clone3 resumed> => {parent_tid=[2357]}, 88) = 2357 [pid 7399] <... rseq resumed>) = 0 [pid 7397] rt_sigprocmask(SIG_SETMASK, [], [pid 7399] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7397] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7399] ftruncate(4, 0 [pid 7397] <... futex resumed>) = 0 [pid 7397] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7399] <... ftruncate resumed>) = 0 [pid 7399] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7398] <... write resumed>) = 1048064 [pid 7399] <... futex resumed>) = 1 [pid 7399] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7398] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7398] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7397] <... futex resumed>) = 0 [pid 7397] close(3) = 0 [pid 7397] close(4) = 0 [pid 7397] close(5) = 0 [pid 7397] close(6) = -1 EBADF (Bad file descriptor) [pid 7397] close(7) = -1 EBADF (Bad file descriptor) [pid 7397] close(8) = -1 EBADF (Bad file descriptor) [pid 7397] close(9) = -1 EBADF (Bad file descriptor) [pid 7397] close(10) = -1 EBADF (Bad file descriptor) [pid 7397] close(11) = -1 EBADF (Bad file descriptor) [pid 7397] close(12) = -1 EBADF (Bad file descriptor) [pid 7397] close(13) = -1 EBADF (Bad file descriptor) [pid 7397] close(14) = -1 EBADF (Bad file descriptor) [pid 7397] close(15) = -1 EBADF (Bad file descriptor) [pid 7397] close(16) = -1 EBADF (Bad file descriptor) [pid 7397] close(17) = -1 EBADF (Bad file descriptor) [pid 7397] close(18) = -1 EBADF (Bad file descriptor) [pid 7397] close(19) = -1 EBADF (Bad file descriptor) [pid 7397] close(20) = -1 EBADF (Bad file descriptor) [pid 7397] close(21) = -1 EBADF (Bad file descriptor) [pid 7397] close(22) = -1 EBADF (Bad file descriptor) [pid 7397] close(23) = -1 EBADF (Bad file descriptor) [pid 7397] close(24) = -1 EBADF (Bad file descriptor) [pid 7397] close(25) = -1 EBADF (Bad file descriptor) [pid 7397] close(26) = -1 EBADF (Bad file descriptor) [pid 7397] close(27) = -1 EBADF (Bad file descriptor) [pid 7397] close(28) = -1 EBADF (Bad file descriptor) [pid 7397] close(29) = -1 EBADF (Bad file descriptor) [pid 7397] exit_group(0) = ? [pid 7399] <... futex resumed>) = ? [pid 7398] <... futex resumed>) = ? [pid 7399] +++ exited with 0 +++ [pid 7398] +++ exited with 0 +++ [pid 7397] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2355, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./791", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./791", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./791/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./791/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./791/cgroup.cpu") = 0 [pid 5028] umount2("./791/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./791/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./791/binderfs") = 0 [pid 5028] umount2("./791/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./791/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./791/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./791/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./791/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./791/file0") = 0 [pid 5028] umount2("./791/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./791/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./791/cgroup") = 0 [pid 5028] umount2("./791/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./791/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./791/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./791") = 0 [pid 5028] mkdir("./792", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7400 attached , child_tidptr=0x5555563a5690) = 2358 [pid 7400] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7400] chdir("./792") = 0 [pid 7400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7400] setpgid(0, 0) = 0 [pid 7400] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7400] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7400] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7400] write(3, "1000", 4) = 4 [pid 7400] close(3) = 0 [pid 7400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7400] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7400] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7400] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7401 attached [pid 7401] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7400] <... clone3 resumed> => {parent_tid=[2359]}, 88) = 2359 [pid 7401] set_robust_list(0x7feeffcce9a0, 24 [pid 7400] rt_sigprocmask(SIG_SETMASK, [], [pid 7401] <... set_robust_list resumed>) = 0 [pid 7400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7401] rt_sigprocmask(SIG_SETMASK, [], [pid 7400] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7400] <... futex resumed>) = 0 [pid 7401] memfd_create("syzkaller", 0 [pid 7400] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7401] <... memfd_create resumed>) = 3 [pid 7401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7401] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7401] munmap(0x7feef78ae000, 2097152) = 0 [pid 7401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7401] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7401] close(3) = 0 [pid 7401] mkdir("./file0", 0777) = 0 [pid 7401] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7401] chdir("./file0") = 0 [pid 7401] ioctl(4, LOOP_CLR_FD) = 0 [pid 7401] close(4) = 0 [pid 7401] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7401] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7400] <... futex resumed>) = 0 [pid 7400] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] <... futex resumed>) = 0 [pid 7401] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7400] <... futex resumed>) = 1 [pid 7400] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7401] <... openat resumed>) = 4 [pid 7401] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7401] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7400] <... futex resumed>) = 0 [pid 7400] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] <... futex resumed>) = 0 [pid 7400] <... futex resumed>) = 1 [pid 7401] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7400] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7401] <... openat resumed>) = 5 [pid 7401] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7400] <... futex resumed>) = 0 [pid 7401] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7400] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7401] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7400] <... futex resumed>) = 0 [ 247.846501][ T7401] loop0: detected capacity change from 0 to 4096 [ 247.856067][ T7401] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 247.888721][ T7401] ntfs: volume version 3.1. [pid 7400] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7400] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7400] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2360]}, 88) = 2360 [pid 7400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7400] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7402 attached [pid 7402] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7400] <... futex resumed>) = 0 [pid 7402] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7402] ftruncate(4, 0 [pid 7400] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7402] <... ftruncate resumed>) = 0 [pid 7402] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7401] <... write resumed>) = 1048064 [pid 7402] <... futex resumed>) = 1 [pid 7401] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7400] <... futex resumed>) = 0 [pid 7402] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7401] <... futex resumed>) = 0 [pid 7401] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7400] close(3) = 0 [pid 7400] close(4) = 0 [pid 7400] close(5) = 0 [pid 7400] close(6) = -1 EBADF (Bad file descriptor) [pid 7400] close(7) = -1 EBADF (Bad file descriptor) [pid 7400] close(8) = -1 EBADF (Bad file descriptor) [pid 7400] close(9) = -1 EBADF (Bad file descriptor) [pid 7400] close(10) = -1 EBADF (Bad file descriptor) [pid 7400] close(11) = -1 EBADF (Bad file descriptor) [pid 7400] close(12) = -1 EBADF (Bad file descriptor) [pid 7400] close(13) = -1 EBADF (Bad file descriptor) [pid 7400] close(14) = -1 EBADF (Bad file descriptor) [pid 7400] close(15) = -1 EBADF (Bad file descriptor) [pid 7400] close(16) = -1 EBADF (Bad file descriptor) [pid 7400] close(17) = -1 EBADF (Bad file descriptor) [pid 7400] close(18) = -1 EBADF (Bad file descriptor) [pid 7400] close(19) = -1 EBADF (Bad file descriptor) [pid 7400] close(20) = -1 EBADF (Bad file descriptor) [pid 7400] close(21) = -1 EBADF (Bad file descriptor) [pid 7400] close(22) = -1 EBADF (Bad file descriptor) [pid 7400] close(23) = -1 EBADF (Bad file descriptor) [pid 7400] close(24) = -1 EBADF (Bad file descriptor) [pid 7400] close(25) = -1 EBADF (Bad file descriptor) [pid 7400] close(26) = -1 EBADF (Bad file descriptor) [pid 7400] close(27) = -1 EBADF (Bad file descriptor) [pid 7400] close(28) = -1 EBADF (Bad file descriptor) [pid 7400] close(29) = -1 EBADF (Bad file descriptor) [pid 7400] exit_group(0) = ? [pid 7401] <... futex resumed>) = ? [pid 7402] <... futex resumed>) = ? [pid 7401] +++ exited with 0 +++ [pid 7402] +++ exited with 0 +++ [pid 7400] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2358, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./792", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./792", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./792/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./792/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./792/cgroup.cpu") = 0 [pid 5028] umount2("./792/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./792/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./792/binderfs") = 0 [pid 5028] umount2("./792/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./792/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./792/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./792/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./792/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./792/file0") = 0 [pid 5028] umount2("./792/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./792/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./792/cgroup") = 0 [pid 5028] umount2("./792/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./792/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./792/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./792") = 0 [pid 5028] mkdir("./793", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7403 attached , child_tidptr=0x5555563a5690) = 2361 [pid 7403] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7403] chdir("./793") = 0 [pid 7403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7403] setpgid(0, 0) = 0 [pid 7403] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7403] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7403] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7403] write(3, "1000", 4) = 4 [pid 7403] close(3) = 0 [pid 7403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7403] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7403] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7403] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7404 attached [pid 7404] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7403] <... clone3 resumed> => {parent_tid=[2362]}, 88) = 2362 [pid 7404] set_robust_list(0x7feeffcce9a0, 24 [pid 7403] rt_sigprocmask(SIG_SETMASK, [], [pid 7404] <... set_robust_list resumed>) = 0 [pid 7403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7404] rt_sigprocmask(SIG_SETMASK, [], [pid 7403] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7403] <... futex resumed>) = 0 [pid 7404] memfd_create("syzkaller", 0 [pid 7403] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7404] <... memfd_create resumed>) = 3 [pid 7404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7404] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7404] munmap(0x7feef78ae000, 2097152) = 0 [pid 7404] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7404] close(3) = 0 [pid 7404] mkdir("./file0", 0777) = 0 [pid 7404] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7404] chdir("./file0") = 0 [pid 7404] ioctl(4, LOOP_CLR_FD) = 0 [pid 7404] close(4) = 0 [pid 7404] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7403] <... futex resumed>) = 0 [pid 7403] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7404] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7403] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7404] <... openat resumed>) = 4 [pid 7404] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] <... futex resumed>) = 0 [pid 7403] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7404] <... futex resumed>) = 1 [pid 7403] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7404] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7404] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7403] <... futex resumed>) = 0 [pid 7403] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7403] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7404] <... futex resumed>) = 1 [ 248.094417][ T7404] loop0: detected capacity change from 0 to 4096 [ 248.103235][ T7404] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 248.136499][ T7404] ntfs: volume version 3.1. [pid 7404] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7403] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7403] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7405 attached [pid 7405] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7405] set_robust_list(0x7feef7aad9a0, 24 [pid 7403] <... clone3 resumed> => {parent_tid=[2363]}, 88) = 2363 [pid 7405] <... set_robust_list resumed>) = 0 [pid 7403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7405] rt_sigprocmask(SIG_SETMASK, [], [pid 7403] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7403] <... futex resumed>) = 0 [pid 7405] ftruncate(4, 0 [pid 7403] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7405] <... ftruncate resumed>) = 0 [pid 7404] <... write resumed>) = 1048064 [pid 7405] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7404] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7405] <... futex resumed>) = 1 [pid 7404] <... futex resumed>) = 0 [pid 7403] <... futex resumed>) = 0 [pid 7405] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7404] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7403] close(3) = 0 [pid 7403] close(4) = 0 [pid 7403] close(5) = 0 [pid 7403] close(6) = -1 EBADF (Bad file descriptor) [pid 7403] close(7) = -1 EBADF (Bad file descriptor) [pid 7403] close(8) = -1 EBADF (Bad file descriptor) [pid 7403] close(9) = -1 EBADF (Bad file descriptor) [pid 7403] close(10) = -1 EBADF (Bad file descriptor) [pid 7403] close(11) = -1 EBADF (Bad file descriptor) [pid 7403] close(12) = -1 EBADF (Bad file descriptor) [pid 7403] close(13) = -1 EBADF (Bad file descriptor) [pid 7403] close(14) = -1 EBADF (Bad file descriptor) [pid 7403] close(15) = -1 EBADF (Bad file descriptor) [pid 7403] close(16) = -1 EBADF (Bad file descriptor) [pid 7403] close(17) = -1 EBADF (Bad file descriptor) [pid 7403] close(18) = -1 EBADF (Bad file descriptor) [pid 7403] close(19) = -1 EBADF (Bad file descriptor) [pid 7403] close(20) = -1 EBADF (Bad file descriptor) [pid 7403] close(21) = -1 EBADF (Bad file descriptor) [pid 7403] close(22) = -1 EBADF (Bad file descriptor) [pid 7403] close(23) = -1 EBADF (Bad file descriptor) [pid 7403] close(24) = -1 EBADF (Bad file descriptor) [pid 7403] close(25) = -1 EBADF (Bad file descriptor) [pid 7403] close(26) = -1 EBADF (Bad file descriptor) [pid 7403] close(27) = -1 EBADF (Bad file descriptor) [pid 7403] close(28) = -1 EBADF (Bad file descriptor) [pid 7403] close(29) = -1 EBADF (Bad file descriptor) [pid 7403] exit_group(0) = ? [pid 7405] <... futex resumed>) = ? [pid 7404] <... futex resumed>) = ? [pid 7404] +++ exited with 0 +++ [pid 7405] +++ exited with 0 +++ [pid 7403] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2361, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./793", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./793", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./793/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./793/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./793/cgroup.cpu") = 0 [pid 5028] umount2("./793/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./793/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./793/binderfs") = 0 [pid 5028] umount2("./793/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./793/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./793/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./793/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./793/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./793/file0") = 0 [pid 5028] umount2("./793/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./793/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./793/cgroup") = 0 [pid 5028] umount2("./793/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./793/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./793/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./793") = 0 [pid 5028] mkdir("./794", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7406 attached , child_tidptr=0x5555563a5690) = 2364 [pid 7406] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7406] chdir("./794") = 0 [pid 7406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7406] setpgid(0, 0) = 0 [pid 7406] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7406] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7406] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7406] write(3, "1000", 4) = 4 [pid 7406] close(3) = 0 [pid 7406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7406] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7406] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7406] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7406] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7407 attached [pid 7407] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7406] <... clone3 resumed> => {parent_tid=[2365]}, 88) = 2365 [pid 7407] set_robust_list(0x7feeffcce9a0, 24 [pid 7406] rt_sigprocmask(SIG_SETMASK, [], [pid 7407] <... set_robust_list resumed>) = 0 [pid 7406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7407] rt_sigprocmask(SIG_SETMASK, [], [pid 7406] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7406] <... futex resumed>) = 0 [pid 7406] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7407] memfd_create("syzkaller", 0) = 3 [pid 7407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7407] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7407] munmap(0x7feef78ae000, 2097152) = 0 [pid 7407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7407] close(3) = 0 [pid 7407] mkdir("./file0", 0777) = 0 [pid 7407] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7407] chdir("./file0") = 0 [pid 7407] ioctl(4, LOOP_CLR_FD) = 0 [pid 7407] close(4) = 0 [pid 7407] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7406] <... futex resumed>) = 0 [pid 7407] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7406] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7406] <... futex resumed>) = 0 [pid 7406] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7407] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7407] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7407] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7406] <... futex resumed>) = 0 [pid 7406] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7407] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7406] <... futex resumed>) = 0 [pid 7407] <... openat resumed>) = 5 [pid 7406] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7407] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7406] <... futex resumed>) = 0 [pid 7406] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7406] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7407] <... futex resumed>) = 1 [ 248.344145][ T7407] loop0: detected capacity change from 0 to 4096 [ 248.353714][ T7407] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 248.386456][ T7407] ntfs: volume version 3.1. [pid 7407] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7406] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7406] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7408 attached => {parent_tid=[2366]}, 88) = 2366 [pid 7408] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7406] rt_sigprocmask(SIG_SETMASK, [], [pid 7408] set_robust_list(0x7feef7aad9a0, 24 [pid 7406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7408] <... set_robust_list resumed>) = 0 [pid 7406] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7408] rt_sigprocmask(SIG_SETMASK, [], [pid 7406] <... futex resumed>) = 0 [pid 7408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7406] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7408] ftruncate(4, 0) = 0 [pid 7408] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7407] <... write resumed>) = 1048064 [pid 7408] <... futex resumed>) = 1 [pid 7407] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7408] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7406] <... futex resumed>) = 0 [pid 7407] <... futex resumed>) = 0 [pid 7407] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7406] close(3) = 0 [pid 7406] close(4) = 0 [pid 7406] close(5) = 0 [pid 7406] close(6) = -1 EBADF (Bad file descriptor) [pid 7406] close(7) = -1 EBADF (Bad file descriptor) [pid 7406] close(8) = -1 EBADF (Bad file descriptor) [pid 7406] close(9) = -1 EBADF (Bad file descriptor) [pid 7406] close(10) = -1 EBADF (Bad file descriptor) [pid 7406] close(11) = -1 EBADF (Bad file descriptor) [pid 7406] close(12) = -1 EBADF (Bad file descriptor) [pid 7406] close(13) = -1 EBADF (Bad file descriptor) [pid 7406] close(14) = -1 EBADF (Bad file descriptor) [pid 7406] close(15) = -1 EBADF (Bad file descriptor) [pid 7406] close(16) = -1 EBADF (Bad file descriptor) [pid 7406] close(17) = -1 EBADF (Bad file descriptor) [pid 7406] close(18) = -1 EBADF (Bad file descriptor) [pid 7406] close(19) = -1 EBADF (Bad file descriptor) [pid 7406] close(20) = -1 EBADF (Bad file descriptor) [pid 7406] close(21) = -1 EBADF (Bad file descriptor) [pid 7406] close(22) = -1 EBADF (Bad file descriptor) [pid 7406] close(23) = -1 EBADF (Bad file descriptor) [pid 7406] close(24) = -1 EBADF (Bad file descriptor) [pid 7406] close(25) = -1 EBADF (Bad file descriptor) [pid 7406] close(26) = -1 EBADF (Bad file descriptor) [pid 7406] close(27) = -1 EBADF (Bad file descriptor) [pid 7406] close(28) = -1 EBADF (Bad file descriptor) [pid 7406] close(29) = -1 EBADF (Bad file descriptor) [pid 7406] exit_group(0) = ? [pid 7407] <... futex resumed>) = ? [pid 7408] <... futex resumed>) = ? [pid 7407] +++ exited with 0 +++ [pid 7408] +++ exited with 0 +++ [pid 7406] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2364, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./794", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./794", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./794/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./794/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./794/cgroup.cpu") = 0 [pid 5028] umount2("./794/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./794/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./794/binderfs") = 0 [pid 5028] umount2("./794/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./794/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./794/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./794/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./794/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./794/file0") = 0 [pid 5028] umount2("./794/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./794/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./794/cgroup") = 0 [pid 5028] umount2("./794/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./794/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./794/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./794") = 0 [pid 5028] mkdir("./795", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7409 attached , child_tidptr=0x5555563a5690) = 2367 [pid 7409] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7409] chdir("./795") = 0 [pid 7409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7409] setpgid(0, 0) = 0 [pid 7409] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7409] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7409] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7409] write(3, "1000", 4) = 4 [pid 7409] close(3) = 0 [pid 7409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7409] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7409] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7409] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7409] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7409] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7410 attached => {parent_tid=[2368]}, 88) = 2368 [pid 7410] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7409] rt_sigprocmask(SIG_SETMASK, [], [pid 7410] <... rseq resumed>) = 0 [pid 7410] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7409] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7409] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7410] memfd_create("syzkaller", 0) = 3 [pid 7410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7410] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7410] munmap(0x7feef78ae000, 2097152) = 0 [pid 7410] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7410] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7410] close(3) = 0 [pid 7410] mkdir("./file0", 0777) = 0 [pid 7410] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7410] chdir("./file0") = 0 [pid 7410] ioctl(4, LOOP_CLR_FD) = 0 [pid 7410] close(4) = 0 [pid 7410] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7409] <... futex resumed>) = 0 [pid 7410] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7409] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] <... futex resumed>) = 0 [pid 7409] <... futex resumed>) = 1 [pid 7410] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7409] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7410] <... openat resumed>) = 4 [pid 7410] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7410] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7409] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] <... futex resumed>) = 0 [pid 7409] <... futex resumed>) = 1 [pid 7409] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7410] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7410] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7410] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7409] <... futex resumed>) = 0 [pid 7409] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7410] <... futex resumed>) = 0 [pid 7409] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 248.590749][ T7410] loop0: detected capacity change from 0 to 4096 [ 248.599780][ T7410] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 248.632724][ T7410] ntfs: volume version 3.1. [pid 7410] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7409] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7409] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7409] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7409] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7411 attached [pid 7411] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7409] <... clone3 resumed> => {parent_tid=[2369]}, 88) = 2369 [pid 7411] <... rseq resumed>) = 0 [pid 7409] rt_sigprocmask(SIG_SETMASK, [], [pid 7411] set_robust_list(0x7feef7aad9a0, 24 [pid 7409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7411] <... set_robust_list resumed>) = 0 [pid 7409] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7411] rt_sigprocmask(SIG_SETMASK, [], [pid 7409] <... futex resumed>) = 0 [pid 7411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7409] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7411] ftruncate(4, 0) = 0 [pid 7411] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7410] <... write resumed>) = 1048064 [pid 7411] <... futex resumed>) = 1 [pid 7410] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7411] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7410] <... futex resumed>) = 0 [pid 7410] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7409] <... futex resumed>) = 0 [pid 7409] close(3) = 0 [pid 7409] close(4) = 0 [pid 7409] close(5) = 0 [pid 7409] close(6) = -1 EBADF (Bad file descriptor) [pid 7409] close(7) = -1 EBADF (Bad file descriptor) [pid 7409] close(8) = -1 EBADF (Bad file descriptor) [pid 7409] close(9) = -1 EBADF (Bad file descriptor) [pid 7409] close(10) = -1 EBADF (Bad file descriptor) [pid 7409] close(11) = -1 EBADF (Bad file descriptor) [pid 7409] close(12) = -1 EBADF (Bad file descriptor) [pid 7409] close(13) = -1 EBADF (Bad file descriptor) [pid 7409] close(14) = -1 EBADF (Bad file descriptor) [pid 7409] close(15) = -1 EBADF (Bad file descriptor) [pid 7409] close(16) = -1 EBADF (Bad file descriptor) [pid 7409] close(17) = -1 EBADF (Bad file descriptor) [pid 7409] close(18) = -1 EBADF (Bad file descriptor) [pid 7409] close(19) = -1 EBADF (Bad file descriptor) [pid 7409] close(20) = -1 EBADF (Bad file descriptor) [pid 7409] close(21) = -1 EBADF (Bad file descriptor) [pid 7409] close(22) = -1 EBADF (Bad file descriptor) [pid 7409] close(23) = -1 EBADF (Bad file descriptor) [pid 7409] close(24) = -1 EBADF (Bad file descriptor) [pid 7409] close(25) = -1 EBADF (Bad file descriptor) [pid 7409] close(26) = -1 EBADF (Bad file descriptor) [pid 7409] close(27) = -1 EBADF (Bad file descriptor) [pid 7409] close(28) = -1 EBADF (Bad file descriptor) [pid 7409] close(29) = -1 EBADF (Bad file descriptor) [pid 7409] exit_group(0) = ? [pid 7410] <... futex resumed>) = ? [pid 7411] <... futex resumed>) = ? [pid 7410] +++ exited with 0 +++ [pid 7411] +++ exited with 0 +++ [pid 7409] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2367, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./795", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./795", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./795/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./795/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./795/cgroup.cpu") = 0 [pid 5028] umount2("./795/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./795/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./795/binderfs") = 0 [pid 5028] umount2("./795/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./795/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./795/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./795/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./795/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./795/file0") = 0 [pid 5028] umount2("./795/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./795/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./795/cgroup") = 0 [pid 5028] umount2("./795/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./795/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./795/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./795") = 0 [pid 5028] mkdir("./796", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7412 attached , child_tidptr=0x5555563a5690) = 2370 [pid 7412] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7412] chdir("./796") = 0 [pid 7412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7412] setpgid(0, 0) = 0 [pid 7412] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7412] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7412] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7412] write(3, "1000", 4) = 4 [pid 7412] close(3) = 0 [pid 7412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7412] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7412] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7412] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7413 attached => {parent_tid=[2371]}, 88) = 2371 [pid 7413] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7412] rt_sigprocmask(SIG_SETMASK, [], [pid 7413] <... rseq resumed>) = 0 [pid 7412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7413] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7412] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7412] <... futex resumed>) = 0 [pid 7412] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7413] memfd_create("syzkaller", 0) = 3 [pid 7413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7413] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7413] munmap(0x7feef78ae000, 2097152) = 0 [pid 7413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7413] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7413] close(3) = 0 [pid 7413] mkdir("./file0", 0777) = 0 [pid 7413] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7413] chdir("./file0") = 0 [pid 7413] ioctl(4, LOOP_CLR_FD) = 0 [pid 7413] close(4) = 0 [pid 7413] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7413] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7412] <... futex resumed>) = 0 [pid 7412] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7413] <... futex resumed>) = 0 [pid 7413] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7412] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7413] <... openat resumed>) = 4 [pid 7413] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7413] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7412] <... futex resumed>) = 0 [pid 7412] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7413] <... futex resumed>) = 0 [pid 7412] <... futex resumed>) = 1 [pid 7412] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7413] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7413] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7412] <... futex resumed>) = 0 [pid 7412] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7412] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 248.838757][ T7413] loop0: detected capacity change from 0 to 4096 [ 248.847931][ T7413] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 248.879592][ T7413] ntfs: volume version 3.1. [pid 7413] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7412] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7412] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7414 attached [pid 7414] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7412] <... clone3 resumed> => {parent_tid=[2372]}, 88) = 2372 [pid 7414] <... rseq resumed>) = 0 [pid 7412] rt_sigprocmask(SIG_SETMASK, [], [pid 7414] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7412] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7412] <... futex resumed>) = 0 [pid 7414] ftruncate(4, 0 [pid 7412] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7414] <... ftruncate resumed>) = 0 [pid 7414] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7412] <... futex resumed>) = 0 [pid 7414] <... futex resumed>) = 1 [pid 7414] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7413] <... write resumed>) = 1048064 [pid 7413] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7413] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7412] close(3) = 0 [pid 7412] close(4) = 0 [pid 7412] close(5) = 0 [pid 7412] close(6) = -1 EBADF (Bad file descriptor) [pid 7412] close(7) = -1 EBADF (Bad file descriptor) [pid 7412] close(8) = -1 EBADF (Bad file descriptor) [pid 7412] close(9) = -1 EBADF (Bad file descriptor) [pid 7412] close(10) = -1 EBADF (Bad file descriptor) [pid 7412] close(11) = -1 EBADF (Bad file descriptor) [pid 7412] close(12) = -1 EBADF (Bad file descriptor) [pid 7412] close(13) = -1 EBADF (Bad file descriptor) [pid 7412] close(14) = -1 EBADF (Bad file descriptor) [pid 7412] close(15) = -1 EBADF (Bad file descriptor) [pid 7412] close(16) = -1 EBADF (Bad file descriptor) [pid 7412] close(17) = -1 EBADF (Bad file descriptor) [pid 7412] close(18) = -1 EBADF (Bad file descriptor) [pid 7412] close(19) = -1 EBADF (Bad file descriptor) [pid 7412] close(20) = -1 EBADF (Bad file descriptor) [pid 7412] close(21) = -1 EBADF (Bad file descriptor) [pid 7412] close(22) = -1 EBADF (Bad file descriptor) [pid 7412] close(23) = -1 EBADF (Bad file descriptor) [pid 7412] close(24) = -1 EBADF (Bad file descriptor) [pid 7412] close(25) = -1 EBADF (Bad file descriptor) [pid 7412] close(26) = -1 EBADF (Bad file descriptor) [pid 7412] close(27) = -1 EBADF (Bad file descriptor) [pid 7412] close(28) = -1 EBADF (Bad file descriptor) [pid 7412] close(29) = -1 EBADF (Bad file descriptor) [pid 7412] exit_group(0 [pid 7414] <... futex resumed>) = ? [pid 7413] <... futex resumed>) = ? [pid 7412] <... exit_group resumed>) = ? [pid 7414] +++ exited with 0 +++ [pid 7413] +++ exited with 0 +++ [pid 7412] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2370, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./796", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./796", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./796/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./796/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./796/cgroup.cpu") = 0 [pid 5028] umount2("./796/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./796/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./796/binderfs") = 0 [pid 5028] umount2("./796/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./796/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./796/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./796/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./796/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./796/file0") = 0 [pid 5028] umount2("./796/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./796/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./796/cgroup") = 0 [pid 5028] umount2("./796/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./796/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./796/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./796") = 0 [pid 5028] mkdir("./797", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7415 attached , child_tidptr=0x5555563a5690) = 2373 [pid 7415] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7415] chdir("./797") = 0 [pid 7415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7415] setpgid(0, 0) = 0 [pid 7415] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7415] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7415] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7415] write(3, "1000", 4) = 4 [pid 7415] close(3) = 0 [pid 7415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7415] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7415] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7415] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7415] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7415] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7416 attached [pid 7416] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7415] <... clone3 resumed> => {parent_tid=[2374]}, 88) = 2374 [pid 7416] <... rseq resumed>) = 0 [pid 7415] rt_sigprocmask(SIG_SETMASK, [], [pid 7416] set_robust_list(0x7feeffcce9a0, 24 [pid 7415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7416] <... set_robust_list resumed>) = 0 [pid 7415] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7416] rt_sigprocmask(SIG_SETMASK, [], [pid 7415] <... futex resumed>) = 0 [pid 7416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7415] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7416] memfd_create("syzkaller", 0) = 3 [pid 7416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7416] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7416] munmap(0x7feef78ae000, 2097152) = 0 [pid 7416] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7416] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7416] close(3) = 0 [pid 7416] mkdir("./file0", 0777) = 0 [pid 7416] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7416] chdir("./file0") = 0 [pid 7416] ioctl(4, LOOP_CLR_FD) = 0 [pid 7416] close(4) = 0 [pid 7416] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7415] <... futex resumed>) = 0 [pid 7416] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7415] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7416] <... futex resumed>) = 0 [pid 7416] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7416] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7415] <... futex resumed>) = 0 [pid 7416] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7415] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7416] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7416] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7415] <... futex resumed>) = 0 [pid 7416] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7415] <... futex resumed>) = 0 [pid 7415] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 249.078901][ T7416] loop0: detected capacity change from 0 to 4096 [ 249.087926][ T7416] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 249.121026][ T7416] ntfs: volume version 3.1. [pid 7416] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7415] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7415] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7415] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7415] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7415] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7417 attached => {parent_tid=[2375]}, 88) = 2375 [pid 7417] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7415] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7415] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7417] <... rseq resumed>) = 0 [pid 7417] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7417] ftruncate(4, 0) = 0 [pid 7417] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7416] <... write resumed>) = 1048064 [pid 7415] <... futex resumed>) = 0 [pid 7417] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7416] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7416] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7415] close(3) = 0 [pid 7415] close(4) = 0 [pid 7415] close(5) = 0 [pid 7415] close(6) = -1 EBADF (Bad file descriptor) [pid 7415] close(7) = -1 EBADF (Bad file descriptor) [pid 7415] close(8) = -1 EBADF (Bad file descriptor) [pid 7415] close(9) = -1 EBADF (Bad file descriptor) [pid 7415] close(10) = -1 EBADF (Bad file descriptor) [pid 7415] close(11) = -1 EBADF (Bad file descriptor) [pid 7415] close(12) = -1 EBADF (Bad file descriptor) [pid 7415] close(13) = -1 EBADF (Bad file descriptor) [pid 7415] close(14) = -1 EBADF (Bad file descriptor) [pid 7415] close(15) = -1 EBADF (Bad file descriptor) [pid 7415] close(16) = -1 EBADF (Bad file descriptor) [pid 7415] close(17) = -1 EBADF (Bad file descriptor) [pid 7415] close(18) = -1 EBADF (Bad file descriptor) [pid 7415] close(19) = -1 EBADF (Bad file descriptor) [pid 7415] close(20) = -1 EBADF (Bad file descriptor) [pid 7415] close(21) = -1 EBADF (Bad file descriptor) [pid 7415] close(22) = -1 EBADF (Bad file descriptor) [pid 7415] close(23) = -1 EBADF (Bad file descriptor) [pid 7415] close(24) = -1 EBADF (Bad file descriptor) [pid 7415] close(25) = -1 EBADF (Bad file descriptor) [pid 7415] close(26) = -1 EBADF (Bad file descriptor) [pid 7415] close(27) = -1 EBADF (Bad file descriptor) [pid 7415] close(28) = -1 EBADF (Bad file descriptor) [pid 7415] close(29) = -1 EBADF (Bad file descriptor) [pid 7415] exit_group(0) = ? [pid 7416] <... futex resumed>) = ? [pid 7416] +++ exited with 0 +++ [pid 7417] <... futex resumed>) = ? [pid 7417] +++ exited with 0 +++ [pid 7415] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2373, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./797", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./797", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./797/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./797/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./797/cgroup.cpu") = 0 [pid 5028] umount2("./797/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./797/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./797/binderfs") = 0 [pid 5028] umount2("./797/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./797/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./797/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./797/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./797/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./797/file0") = 0 [pid 5028] umount2("./797/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./797/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./797/cgroup") = 0 [pid 5028] umount2("./797/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./797/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./797/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./797") = 0 [pid 5028] mkdir("./798", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7418 attached , child_tidptr=0x5555563a5690) = 2376 [pid 7418] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7418] chdir("./798") = 0 [pid 7418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7418] setpgid(0, 0) = 0 [pid 7418] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7418] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7418] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7418] write(3, "1000", 4) = 4 [pid 7418] close(3) = 0 [pid 7418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7418] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7418] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7418] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7419 attached => {parent_tid=[2377]}, 88) = 2377 [pid 7419] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7418] rt_sigprocmask(SIG_SETMASK, [], [pid 7419] <... rseq resumed>) = 0 [pid 7418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7419] set_robust_list(0x7feeffcce9a0, 24 [pid 7418] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7419] <... set_robust_list resumed>) = 0 [pid 7418] <... futex resumed>) = 0 [pid 7419] rt_sigprocmask(SIG_SETMASK, [], [pid 7418] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7419] memfd_create("syzkaller", 0) = 3 [pid 7419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7419] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7419] munmap(0x7feef78ae000, 2097152) = 0 [pid 7419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7419] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7419] close(3) = 0 [pid 7419] mkdir("./file0", 0777) = 0 [pid 7419] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7419] chdir("./file0") = 0 [pid 7419] ioctl(4, LOOP_CLR_FD) = 0 [pid 7419] close(4) = 0 [pid 7419] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7418] <... futex resumed>) = 0 [pid 7419] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7418] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7419] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7418] <... futex resumed>) = 0 [pid 7419] <... openat resumed>) = 4 [pid 7418] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7419] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7418] <... futex resumed>) = 0 [pid 7419] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7418] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7418] <... futex resumed>) = 0 [pid 7419] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7418] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7419] <... openat resumed>) = 5 [pid 7419] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7418] <... futex resumed>) = 0 [pid 7419] <... futex resumed>) = 1 [pid 7418] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7419] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7418] <... futex resumed>) = 0 [ 249.316098][ T7419] loop0: detected capacity change from 0 to 4096 [ 249.337485][ T7419] ntfs: volume version 3.1. [pid 7418] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7418] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7418] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2378]}, 88) = 2378 ./strace-static-x86_64: Process 7420 attached [pid 7418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7418] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7420] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7418] <... futex resumed>) = 0 [pid 7420] <... rseq resumed>) = 0 [pid 7420] set_robust_list(0x7feef7aad9a0, 24 [pid 7418] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7420] <... set_robust_list resumed>) = 0 [pid 7420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7420] ftruncate(4, 0) = 0 [pid 7420] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7419] <... write resumed>) = 1048064 [pid 7420] <... futex resumed>) = 1 [pid 7419] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7418] <... futex resumed>) = 0 [pid 7420] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7418] close(3) = 0 [pid 7418] close(4) = 0 [pid 7418] close(5) = 0 [pid 7418] close(6) = -1 EBADF (Bad file descriptor) [pid 7418] close(7) = -1 EBADF (Bad file descriptor) [pid 7418] close(8) = -1 EBADF (Bad file descriptor) [pid 7418] close(9) = -1 EBADF (Bad file descriptor) [pid 7418] close(10) = -1 EBADF (Bad file descriptor) [pid 7418] close(11) = -1 EBADF (Bad file descriptor) [pid 7418] close(12) = -1 EBADF (Bad file descriptor) [pid 7418] close(13) = -1 EBADF (Bad file descriptor) [pid 7418] close(14) = -1 EBADF (Bad file descriptor) [pid 7418] close(15) = -1 EBADF (Bad file descriptor) [pid 7418] close(16) = -1 EBADF (Bad file descriptor) [pid 7418] close(17) = -1 EBADF (Bad file descriptor) [pid 7418] close(18) = -1 EBADF (Bad file descriptor) [pid 7418] close(19) = -1 EBADF (Bad file descriptor) [pid 7418] close(20) = -1 EBADF (Bad file descriptor) [pid 7418] close(21) = -1 EBADF (Bad file descriptor) [pid 7418] close(22) = -1 EBADF (Bad file descriptor) [pid 7418] close(23) = -1 EBADF (Bad file descriptor) [pid 7418] close(24) = -1 EBADF (Bad file descriptor) [pid 7418] close(25) = -1 EBADF (Bad file descriptor) [pid 7418] close(26) = -1 EBADF (Bad file descriptor) [pid 7418] close(27) = -1 EBADF (Bad file descriptor) [pid 7418] close(28) = -1 EBADF (Bad file descriptor) [pid 7418] close(29) = -1 EBADF (Bad file descriptor) [pid 7419] <... futex resumed>) = 0 [pid 7418] exit_group(0 [pid 7419] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7420] <... futex resumed>) = ? [pid 7419] <... futex resumed>) = ? [pid 7418] <... exit_group resumed>) = ? [pid 7420] +++ exited with 0 +++ [pid 7419] +++ exited with 0 +++ [pid 7418] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2376, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./798", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./798", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./798/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./798/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./798/cgroup.cpu") = 0 [pid 5028] umount2("./798/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./798/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./798/binderfs") = 0 [pid 5028] umount2("./798/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./798/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./798/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./798/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./798/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./798/file0") = 0 [pid 5028] umount2("./798/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./798/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./798/cgroup") = 0 [pid 5028] umount2("./798/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./798/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./798/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./798") = 0 [pid 5028] mkdir("./799", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7421 attached , child_tidptr=0x5555563a5690) = 2379 [pid 7421] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7421] chdir("./799") = 0 [pid 7421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7421] setpgid(0, 0) = 0 [pid 7421] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7421] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7421] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7421] write(3, "1000", 4) = 4 [pid 7421] close(3) = 0 [pid 7421] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7421] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7421] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7421] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7421] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7422 attached [pid 7422] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7421] <... clone3 resumed> => {parent_tid=[2380]}, 88) = 2380 [pid 7422] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7421] rt_sigprocmask(SIG_SETMASK, [], [pid 7422] rt_sigprocmask(SIG_SETMASK, [], [pid 7421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7421] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7421] <... futex resumed>) = 0 [pid 7421] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7422] memfd_create("syzkaller", 0) = 3 [pid 7422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7422] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7422] munmap(0x7feef78ae000, 2097152) = 0 [pid 7422] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7422] close(3) = 0 [pid 7422] mkdir("./file0", 0777) = 0 [pid 7422] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7422] chdir("./file0") = 0 [pid 7422] ioctl(4, LOOP_CLR_FD) = 0 [pid 7422] close(4) = 0 [pid 7422] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7422] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7421] <... futex resumed>) = 0 [pid 7421] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7422] <... futex resumed>) = 0 [pid 7422] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7421] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7422] <... openat resumed>) = 4 [pid 7422] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7421] <... futex resumed>) = 0 [pid 7422] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7421] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7421] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7422] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7422] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7422] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7421] <... futex resumed>) = 0 [pid 7421] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] <... futex resumed>) = 0 [pid 7421] <... futex resumed>) = 1 [pid 7422] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 249.551598][ T7422] loop0: detected capacity change from 0 to 4096 [ 249.573144][ T7422] ntfs: volume version 3.1. [pid 7421] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7421] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7421] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7421] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7421] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7421] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7423 attached => {parent_tid=[2381]}, 88) = 2381 [pid 7423] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7421] rt_sigprocmask(SIG_SETMASK, [], [pid 7423] <... rseq resumed>) = 0 [pid 7421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7423] set_robust_list(0x7feef7aad9a0, 24 [pid 7421] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7423] <... set_robust_list resumed>) = 0 [pid 7421] <... futex resumed>) = 0 [pid 7423] rt_sigprocmask(SIG_SETMASK, [], [pid 7421] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7423] ftruncate(4, 0) = 0 [pid 7423] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7422] <... write resumed>) = 1048064 [pid 7423] <... futex resumed>) = 1 [pid 7422] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7423] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7421] <... futex resumed>) = 0 [pid 7422] <... futex resumed>) = 0 [pid 7421] close(3 [pid 7422] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7421] <... close resumed>) = 0 [pid 7421] close(4) = 0 [pid 7421] close(5) = 0 [pid 7421] close(6) = -1 EBADF (Bad file descriptor) [pid 7421] close(7) = -1 EBADF (Bad file descriptor) [pid 7421] close(8) = -1 EBADF (Bad file descriptor) [pid 7421] close(9) = -1 EBADF (Bad file descriptor) [pid 7421] close(10) = -1 EBADF (Bad file descriptor) [pid 7421] close(11) = -1 EBADF (Bad file descriptor) [pid 7421] close(12) = -1 EBADF (Bad file descriptor) [pid 7421] close(13) = -1 EBADF (Bad file descriptor) [pid 7421] close(14) = -1 EBADF (Bad file descriptor) [pid 7421] close(15) = -1 EBADF (Bad file descriptor) [pid 7421] close(16) = -1 EBADF (Bad file descriptor) [pid 7421] close(17) = -1 EBADF (Bad file descriptor) [pid 7421] close(18) = -1 EBADF (Bad file descriptor) [pid 7421] close(19) = -1 EBADF (Bad file descriptor) [pid 7421] close(20) = -1 EBADF (Bad file descriptor) [pid 7421] close(21) = -1 EBADF (Bad file descriptor) [pid 7421] close(22) = -1 EBADF (Bad file descriptor) [pid 7421] close(23) = -1 EBADF (Bad file descriptor) [pid 7421] close(24) = -1 EBADF (Bad file descriptor) [pid 7421] close(25) = -1 EBADF (Bad file descriptor) [pid 7421] close(26) = -1 EBADF (Bad file descriptor) [pid 7421] close(27) = -1 EBADF (Bad file descriptor) [pid 7421] close(28) = -1 EBADF (Bad file descriptor) [pid 7421] close(29) = -1 EBADF (Bad file descriptor) [pid 7421] exit_group(0) = ? [pid 7422] <... futex resumed>) = ? [pid 7423] <... futex resumed>) = ? [pid 7422] +++ exited with 0 +++ [pid 7423] +++ exited with 0 +++ [pid 7421] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2379, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./799", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./799", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./799/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./799/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./799/cgroup.cpu") = 0 [pid 5028] umount2("./799/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./799/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./799/binderfs") = 0 [pid 5028] umount2("./799/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./799/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./799/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./799/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./799/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./799/file0") = 0 [pid 5028] umount2("./799/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./799/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./799/cgroup") = 0 [pid 5028] umount2("./799/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./799/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./799/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./799") = 0 [pid 5028] mkdir("./800", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7424 attached [pid 7424] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7424] chdir("./800") = 0 [pid 7424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7424] setpgid(0, 0) = 0 [pid 7424] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7424] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7424] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7424] write(3, "1000", 4) = 4 [pid 7424] close(3) = 0 [pid 7424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7424] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7424] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7424] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2382 [pid 7424] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7424] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7425 attached [pid 7425] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7424] <... clone3 resumed> => {parent_tid=[2383]}, 88) = 2383 [pid 7425] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7424] rt_sigprocmask(SIG_SETMASK, [], [pid 7425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7425] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7424] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7424] <... futex resumed>) = 0 [pid 7424] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7425] memfd_create("syzkaller", 0) = 3 [pid 7425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7425] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7425] munmap(0x7feef78ae000, 2097152) = 0 [pid 7425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7425] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7425] close(3) = 0 [pid 7425] mkdir("./file0", 0777) = 0 [pid 7425] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7425] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7425] chdir("./file0") = 0 [pid 7425] ioctl(4, LOOP_CLR_FD) = 0 [pid 7425] close(4) = 0 [pid 7425] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7424] <... futex resumed>) = 0 [pid 7425] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7424] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7425] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7424] <... futex resumed>) = 0 [pid 7424] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7425] <... openat resumed>) = 4 [pid 7425] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7424] <... futex resumed>) = 0 [pid 7424] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7424] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7425] <... futex resumed>) = 1 [pid 7425] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7425] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7424] <... futex resumed>) = 0 [pid 7424] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7425] <... futex resumed>) = 1 [pid 7424] <... futex resumed>) = 0 [pid 7425] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 249.773812][ T7425] loop0: detected capacity change from 0 to 4096 [ 249.796164][ T7425] ntfs: volume version 3.1. [pid 7424] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7424] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7424] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7424] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7426 attached => {parent_tid=[2384]}, 88) = 2384 [pid 7426] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7424] rt_sigprocmask(SIG_SETMASK, [], [pid 7426] <... rseq resumed>) = 0 [pid 7424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7424] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7426] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7424] <... futex resumed>) = 0 [pid 7426] rt_sigprocmask(SIG_SETMASK, [], [pid 7424] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7426] ftruncate(4, 0) = 0 [pid 7425] <... write resumed>) = 1048064 [pid 7426] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7425] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7426] <... futex resumed>) = 1 [pid 7425] <... futex resumed>) = 0 [pid 7426] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7425] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7424] <... futex resumed>) = 0 [pid 7424] close(3) = 0 [pid 7424] close(4) = 0 [pid 7424] close(5) = 0 [pid 7424] close(6) = -1 EBADF (Bad file descriptor) [pid 7424] close(7) = -1 EBADF (Bad file descriptor) [pid 7424] close(8) = -1 EBADF (Bad file descriptor) [pid 7424] close(9) = -1 EBADF (Bad file descriptor) [pid 7424] close(10) = -1 EBADF (Bad file descriptor) [pid 7424] close(11) = -1 EBADF (Bad file descriptor) [pid 7424] close(12) = -1 EBADF (Bad file descriptor) [pid 7424] close(13) = -1 EBADF (Bad file descriptor) [pid 7424] close(14) = -1 EBADF (Bad file descriptor) [pid 7424] close(15) = -1 EBADF (Bad file descriptor) [pid 7424] close(16) = -1 EBADF (Bad file descriptor) [pid 7424] close(17) = -1 EBADF (Bad file descriptor) [pid 7424] close(18) = -1 EBADF (Bad file descriptor) [pid 7424] close(19) = -1 EBADF (Bad file descriptor) [pid 7424] close(20) = -1 EBADF (Bad file descriptor) [pid 7424] close(21) = -1 EBADF (Bad file descriptor) [pid 7424] close(22) = -1 EBADF (Bad file descriptor) [pid 7424] close(23) = -1 EBADF (Bad file descriptor) [pid 7424] close(24) = -1 EBADF (Bad file descriptor) [pid 7424] close(25) = -1 EBADF (Bad file descriptor) [pid 7424] close(26) = -1 EBADF (Bad file descriptor) [pid 7424] close(27) = -1 EBADF (Bad file descriptor) [pid 7424] close(28) = -1 EBADF (Bad file descriptor) [pid 7424] close(29) = -1 EBADF (Bad file descriptor) [pid 7424] exit_group(0) = ? [pid 7425] <... futex resumed>) = ? [pid 7426] <... futex resumed>) = ? [pid 7425] +++ exited with 0 +++ [pid 7426] +++ exited with 0 +++ [pid 7424] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2382, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./800", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./800", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./800/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./800/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./800/cgroup.cpu") = 0 [pid 5028] umount2("./800/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./800/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./800/binderfs") = 0 [pid 5028] umount2("./800/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./800/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./800/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./800/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./800/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./800/file0") = 0 [pid 5028] umount2("./800/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./800/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./800/cgroup") = 0 [pid 5028] umount2("./800/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./800/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./800/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./800") = 0 [pid 5028] mkdir("./801", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7427 attached , child_tidptr=0x5555563a5690) = 2385 [pid 7427] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7427] chdir("./801") = 0 [pid 7427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7427] setpgid(0, 0) = 0 [pid 7427] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7427] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7427] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7427] write(3, "1000", 4) = 4 [pid 7427] close(3) = 0 [pid 7427] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7427] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7427] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7427] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2386]}, 88) = 2386 [pid 7427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7427] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7427] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7428 attached [pid 7428] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7428] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7428] memfd_create("syzkaller", 0) = 3 [pid 7428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7428] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7428] munmap(0x7feef78ae000, 2097152) = 0 [pid 7428] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7428] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7428] close(3) = 0 [pid 7428] mkdir("./file0", 0777) = 0 [pid 7428] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7428] chdir("./file0") = 0 [pid 7428] ioctl(4, LOOP_CLR_FD) = 0 [pid 7428] close(4) = 0 [pid 7428] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7427] <... futex resumed>) = 0 [pid 7428] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7427] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7427] <... futex resumed>) = 0 [pid 7428] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7427] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7428] <... openat resumed>) = 4 [pid 7428] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7427] <... futex resumed>) = 0 [pid 7427] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7427] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7428] <... futex resumed>) = 1 [pid 7428] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7428] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7427] <... futex resumed>) = 0 [pid 7428] <... futex resumed>) = 1 [pid 7427] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7428] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 250.006381][ T7428] loop0: detected capacity change from 0 to 4096 [ 250.027391][ T7428] ntfs: volume version 3.1. [pid 7427] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7427] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7427] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2387]}, 88) = 2387 [pid 7427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7427] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7427] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7429 attached [pid 7429] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7429] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7429] ftruncate(4, 0) = 0 [pid 7429] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7427] <... futex resumed>) = 0 [pid 7429] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7428] <... write resumed>) = 1048064 [pid 7428] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7428] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7427] close(3) = 0 [pid 7427] close(4) = 0 [pid 7427] close(5) = 0 [pid 7427] close(6) = -1 EBADF (Bad file descriptor) [pid 7427] close(7) = -1 EBADF (Bad file descriptor) [pid 7427] close(8) = -1 EBADF (Bad file descriptor) [pid 7427] close(9) = -1 EBADF (Bad file descriptor) [pid 7427] close(10) = -1 EBADF (Bad file descriptor) [pid 7427] close(11) = -1 EBADF (Bad file descriptor) [pid 7427] close(12) = -1 EBADF (Bad file descriptor) [pid 7427] close(13) = -1 EBADF (Bad file descriptor) [pid 7427] close(14) = -1 EBADF (Bad file descriptor) [pid 7427] close(15) = -1 EBADF (Bad file descriptor) [pid 7427] close(16) = -1 EBADF (Bad file descriptor) [pid 7427] close(17) = -1 EBADF (Bad file descriptor) [pid 7427] close(18) = -1 EBADF (Bad file descriptor) [pid 7427] close(19) = -1 EBADF (Bad file descriptor) [pid 7427] close(20) = -1 EBADF (Bad file descriptor) [pid 7427] close(21) = -1 EBADF (Bad file descriptor) [pid 7427] close(22) = -1 EBADF (Bad file descriptor) [pid 7427] close(23) = -1 EBADF (Bad file descriptor) [pid 7427] close(24) = -1 EBADF (Bad file descriptor) [pid 7427] close(25) = -1 EBADF (Bad file descriptor) [pid 7427] close(26) = -1 EBADF (Bad file descriptor) [pid 7427] close(27) = -1 EBADF (Bad file descriptor) [pid 7427] close(28) = -1 EBADF (Bad file descriptor) [pid 7427] close(29) = -1 EBADF (Bad file descriptor) [pid 7427] exit_group(0) = ? [pid 7429] <... futex resumed>) = ? [pid 7428] <... futex resumed>) = ? [pid 7428] +++ exited with 0 +++ [pid 7429] +++ exited with 0 +++ [pid 7427] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2385, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./801", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./801", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./801/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./801/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./801/cgroup.cpu") = 0 [pid 5028] umount2("./801/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./801/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./801/binderfs") = 0 [pid 5028] umount2("./801/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./801/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./801/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./801/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./801/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./801/file0") = 0 [pid 5028] umount2("./801/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./801/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./801/cgroup") = 0 [pid 5028] umount2("./801/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./801/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./801/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./801") = 0 [pid 5028] mkdir("./802", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7430 attached , child_tidptr=0x5555563a5690) = 2388 [pid 7430] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7430] chdir("./802") = 0 [pid 7430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7430] setpgid(0, 0) = 0 [pid 7430] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7430] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7430] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7430] write(3, "1000", 4) = 4 [pid 7430] close(3) = 0 [pid 7430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7430] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7430] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7430] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7430] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7431 attached => {parent_tid=[2389]}, 88) = 2389 [pid 7431] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7430] rt_sigprocmask(SIG_SETMASK, [], [pid 7431] <... rseq resumed>) = 0 [pid 7430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7431] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7430] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7430] <... futex resumed>) = 0 [pid 7431] memfd_create("syzkaller", 0 [pid 7430] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7431] <... memfd_create resumed>) = 3 [pid 7431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7431] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7431] munmap(0x7feef78ae000, 2097152) = 0 [pid 7431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7431] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7431] close(3) = 0 [pid 7431] mkdir("./file0", 0777) = 0 [pid 7431] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7431] chdir("./file0") = 0 [pid 7431] ioctl(4, LOOP_CLR_FD) = 0 [pid 7431] close(4) = 0 [pid 7431] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7430] <... futex resumed>) = 0 [pid 7431] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7430] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7430] <... futex resumed>) = 0 [pid 7430] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7431] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7431] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7431] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7430] <... futex resumed>) = 0 [pid 7430] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7431] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7430] <... futex resumed>) = 0 [pid 7430] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7431] <... openat resumed>) = 5 [pid 7431] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7430] <... futex resumed>) = 0 [pid 7430] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7430] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7431] <... futex resumed>) = 1 [ 250.230195][ T7431] loop0: detected capacity change from 0 to 4096 [ 250.251976][ T7431] ntfs: volume version 3.1. [pid 7431] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7430] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7430] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7430] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7430] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2390]}, 88) = 2390 ./strace-static-x86_64: Process 7432 attached [pid 7430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7430] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7432] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7430] <... futex resumed>) = 0 [pid 7432] <... rseq resumed>) = 0 [pid 7432] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7430] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7432] ftruncate(4, 0) = 0 [pid 7432] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7432] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7431] <... write resumed>) = 1048064 [pid 7431] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7431] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7430] <... futex resumed>) = 0 [pid 7430] close(3) = 0 [pid 7430] close(4) = 0 [pid 7430] close(5) = 0 [pid 7430] close(6) = -1 EBADF (Bad file descriptor) [pid 7430] close(7) = -1 EBADF (Bad file descriptor) [pid 7430] close(8) = -1 EBADF (Bad file descriptor) [pid 7430] close(9) = -1 EBADF (Bad file descriptor) [pid 7430] close(10) = -1 EBADF (Bad file descriptor) [pid 7430] close(11) = -1 EBADF (Bad file descriptor) [pid 7430] close(12) = -1 EBADF (Bad file descriptor) [pid 7430] close(13) = -1 EBADF (Bad file descriptor) [pid 7430] close(14) = -1 EBADF (Bad file descriptor) [pid 7430] close(15) = -1 EBADF (Bad file descriptor) [pid 7430] close(16) = -1 EBADF (Bad file descriptor) [pid 7430] close(17) = -1 EBADF (Bad file descriptor) [pid 7430] close(18) = -1 EBADF (Bad file descriptor) [pid 7430] close(19) = -1 EBADF (Bad file descriptor) [pid 7430] close(20) = -1 EBADF (Bad file descriptor) [pid 7430] close(21) = -1 EBADF (Bad file descriptor) [pid 7430] close(22) = -1 EBADF (Bad file descriptor) [pid 7430] close(23) = -1 EBADF (Bad file descriptor) [pid 7430] close(24) = -1 EBADF (Bad file descriptor) [pid 7430] close(25) = -1 EBADF (Bad file descriptor) [pid 7430] close(26) = -1 EBADF (Bad file descriptor) [pid 7430] close(27) = -1 EBADF (Bad file descriptor) [pid 7430] close(28) = -1 EBADF (Bad file descriptor) [pid 7430] close(29) = -1 EBADF (Bad file descriptor) [pid 7430] exit_group(0) = ? [pid 7431] <... futex resumed>) = ? [pid 7432] <... futex resumed>) = ? [pid 7432] +++ exited with 0 +++ [pid 7431] +++ exited with 0 +++ [pid 7430] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2388, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./802", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./802", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./802/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./802/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./802/cgroup.cpu") = 0 [pid 5028] umount2("./802/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./802/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./802/binderfs") = 0 [pid 5028] umount2("./802/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./802/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./802/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./802/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./802/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./802/file0") = 0 [pid 5028] umount2("./802/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./802/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./802/cgroup") = 0 [pid 5028] umount2("./802/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./802/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./802/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./802") = 0 [pid 5028] mkdir("./803", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7433 attached , child_tidptr=0x5555563a5690) = 2391 [pid 7433] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7433] chdir("./803") = 0 [pid 7433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7433] setpgid(0, 0) = 0 [pid 7433] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7433] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7433] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7433] write(3, "1000", 4) = 4 [pid 7433] close(3) = 0 [pid 7433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7433] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7433] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7433] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7433] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7434 attached => {parent_tid=[2392]}, 88) = 2392 [pid 7434] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7433] rt_sigprocmask(SIG_SETMASK, [], [pid 7434] set_robust_list(0x7feeffcce9a0, 24 [pid 7433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7434] <... set_robust_list resumed>) = 0 [pid 7434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7434] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7433] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7434] <... futex resumed>) = 0 [pid 7433] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7434] memfd_create("syzkaller", 0) = 3 [pid 7434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7434] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7434] munmap(0x7feef78ae000, 2097152) = 0 [pid 7434] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7434] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7434] close(3) = 0 [pid 7434] mkdir("./file0", 0777) = 0 [pid 7434] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7434] chdir("./file0") = 0 [pid 7434] ioctl(4, LOOP_CLR_FD) = 0 [pid 7434] close(4) = 0 [pid 7434] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7433] <... futex resumed>) = 0 [pid 7434] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7433] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7433] <... futex resumed>) = 0 [pid 7434] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7433] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7434] <... openat resumed>) = 4 [pid 7434] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7433] <... futex resumed>) = 0 [pid 7434] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7433] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7434] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7433] <... futex resumed>) = 0 [pid 7434] <... openat resumed>) = 5 [pid 7433] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7434] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7434] <... futex resumed>) = 0 [pid 7434] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7433] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7434] <... futex resumed>) = 0 [pid 7433] <... futex resumed>) = 1 [pid 7434] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 250.445786][ T7434] loop0: detected capacity change from 0 to 4096 [ 250.466353][ T7434] ntfs: volume version 3.1. [pid 7433] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7433] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7433] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7435 attached [pid 7434] <... write resumed>) = 1048064 [pid 7435] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7434] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7433] <... clone3 resumed> => {parent_tid=[2393]}, 88) = 2393 [pid 7435] <... rseq resumed>) = 0 [pid 7434] <... futex resumed>) = 0 [pid 7435] set_robust_list(0x7feef7aad9a0, 24 [pid 7434] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7433] rt_sigprocmask(SIG_SETMASK, [], [pid 7435] <... set_robust_list resumed>) = 0 [pid 7435] rt_sigprocmask(SIG_SETMASK, [], [pid 7433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7435] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7433] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7435] ftruncate(4, 0 [pid 7433] <... futex resumed>) = 0 [pid 7433] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7435] <... ftruncate resumed>) = 0 [pid 7435] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7435] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7433] <... futex resumed>) = 0 [pid 7433] close(3) = 0 [pid 7433] close(4) = 0 [pid 7433] close(5) = 0 [pid 7433] close(6) = -1 EBADF (Bad file descriptor) [pid 7433] close(7) = -1 EBADF (Bad file descriptor) [pid 7433] close(8) = -1 EBADF (Bad file descriptor) [pid 7433] close(9) = -1 EBADF (Bad file descriptor) [pid 7433] close(10) = -1 EBADF (Bad file descriptor) [pid 7433] close(11) = -1 EBADF (Bad file descriptor) [pid 7433] close(12) = -1 EBADF (Bad file descriptor) [pid 7433] close(13) = -1 EBADF (Bad file descriptor) [pid 7433] close(14) = -1 EBADF (Bad file descriptor) [pid 7433] close(15) = -1 EBADF (Bad file descriptor) [pid 7433] close(16) = -1 EBADF (Bad file descriptor) [pid 7433] close(17) = -1 EBADF (Bad file descriptor) [pid 7433] close(18) = -1 EBADF (Bad file descriptor) [pid 7433] close(19) = -1 EBADF (Bad file descriptor) [pid 7433] close(20) = -1 EBADF (Bad file descriptor) [pid 7433] close(21) = -1 EBADF (Bad file descriptor) [pid 7433] close(22) = -1 EBADF (Bad file descriptor) [pid 7433] close(23) = -1 EBADF (Bad file descriptor) [pid 7433] close(24) = -1 EBADF (Bad file descriptor) [pid 7433] close(25) = -1 EBADF (Bad file descriptor) [pid 7433] close(26) = -1 EBADF (Bad file descriptor) [pid 7433] close(27) = -1 EBADF (Bad file descriptor) [pid 7433] close(28) = -1 EBADF (Bad file descriptor) [pid 7433] close(29) = -1 EBADF (Bad file descriptor) [pid 7433] exit_group(0 [pid 7434] <... futex resumed>) = ? [pid 7434] +++ exited with 0 +++ [pid 7435] <... futex resumed>) = ? [pid 7433] <... exit_group resumed>) = ? [pid 7435] +++ exited with 0 +++ [pid 7433] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2391, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./803", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./803", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./803/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./803/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./803/cgroup.cpu") = 0 [pid 5028] umount2("./803/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./803/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./803/binderfs") = 0 [pid 5028] umount2("./803/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./803/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./803/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./803/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./803/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./803/file0") = 0 [pid 5028] umount2("./803/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./803/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./803/cgroup") = 0 [pid 5028] umount2("./803/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./803/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./803/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./803") = 0 [pid 5028] mkdir("./804", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7436 attached [pid 7436] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2394 [pid 7436] <... set_robust_list resumed>) = 0 [pid 7436] chdir("./804") = 0 [pid 7436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7436] setpgid(0, 0) = 0 [pid 7436] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7436] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7436] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7436] write(3, "1000", 4) = 4 [pid 7436] close(3) = 0 [pid 7436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7436] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7436] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7436] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7437 attached [pid 7437] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7436] <... clone3 resumed> => {parent_tid=[2395]}, 88) = 2395 [pid 7437] set_robust_list(0x7feeffcce9a0, 24 [pid 7436] rt_sigprocmask(SIG_SETMASK, [], [pid 7437] <... set_robust_list resumed>) = 0 [pid 7437] rt_sigprocmask(SIG_SETMASK, [], [pid 7436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7436] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7436] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7437] memfd_create("syzkaller", 0) = 3 [pid 7437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7437] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7437] munmap(0x7feef78ae000, 2097152) = 0 [pid 7437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7437] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7437] close(3) = 0 [pid 7437] mkdir("./file0", 0777) = 0 [pid 7437] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7437] chdir("./file0") = 0 [pid 7437] ioctl(4, LOOP_CLR_FD) = 0 [pid 7437] close(4) = 0 [pid 7437] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7436] <... futex resumed>) = 0 [pid 7436] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7437] <... futex resumed>) = 1 [pid 7436] <... futex resumed>) = 0 [pid 7436] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7437] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7437] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7436] <... futex resumed>) = 0 [pid 7437] <... futex resumed>) = 1 [pid 7436] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7437] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7436] <... futex resumed>) = 0 [pid 7436] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7437] <... openat resumed>) = 5 [pid 7437] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7436] <... futex resumed>) = 0 [pid 7436] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7437] <... futex resumed>) = 1 [pid 7436] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 250.686831][ T7437] loop0: detected capacity change from 0 to 4096 [ 250.706813][ T7437] ntfs: volume version 3.1. [pid 7437] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7436] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7436] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7436] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2396]}, 88) = 2396 [pid 7436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7436] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7436] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7438 attached [pid 7438] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7438] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7438] ftruncate(4, 0) = 0 [pid 7438] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7437] <... write resumed>) = 1048064 [pid 7438] <... futex resumed>) = 1 [pid 7437] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7436] <... futex resumed>) = 0 [pid 7438] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7437] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7436] close(3) = 0 [pid 7436] close(4) = 0 [pid 7436] close(5) = 0 [pid 7436] close(6) = -1 EBADF (Bad file descriptor) [pid 7436] close(7) = -1 EBADF (Bad file descriptor) [pid 7436] close(8) = -1 EBADF (Bad file descriptor) [pid 7436] close(9) = -1 EBADF (Bad file descriptor) [pid 7436] close(10) = -1 EBADF (Bad file descriptor) [pid 7436] close(11) = -1 EBADF (Bad file descriptor) [pid 7436] close(12) = -1 EBADF (Bad file descriptor) [pid 7436] close(13) = -1 EBADF (Bad file descriptor) [pid 7436] close(14) = -1 EBADF (Bad file descriptor) [pid 7436] close(15) = -1 EBADF (Bad file descriptor) [pid 7436] close(16) = -1 EBADF (Bad file descriptor) [pid 7436] close(17) = -1 EBADF (Bad file descriptor) [pid 7436] close(18) = -1 EBADF (Bad file descriptor) [pid 7436] close(19) = -1 EBADF (Bad file descriptor) [pid 7436] close(20) = -1 EBADF (Bad file descriptor) [pid 7436] close(21) = -1 EBADF (Bad file descriptor) [pid 7436] close(22) = -1 EBADF (Bad file descriptor) [pid 7436] close(23) = -1 EBADF (Bad file descriptor) [pid 7436] close(24) = -1 EBADF (Bad file descriptor) [pid 7436] close(25) = -1 EBADF (Bad file descriptor) [pid 7436] close(26) = -1 EBADF (Bad file descriptor) [pid 7436] close(27) = -1 EBADF (Bad file descriptor) [pid 7436] close(28) = -1 EBADF (Bad file descriptor) [pid 7436] close(29) = -1 EBADF (Bad file descriptor) [pid 7436] exit_group(0) = ? [pid 7437] <... futex resumed>) = ? [pid 7438] <... futex resumed>) = ? [pid 7437] +++ exited with 0 +++ [pid 7438] +++ exited with 0 +++ [pid 7436] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2394, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./804", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./804", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./804/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./804/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./804/cgroup.cpu") = 0 [pid 5028] umount2("./804/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./804/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./804/binderfs") = 0 [pid 5028] umount2("./804/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./804/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./804/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./804/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./804/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./804/file0") = 0 [pid 5028] umount2("./804/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./804/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./804/cgroup") = 0 [pid 5028] umount2("./804/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./804/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./804/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./804") = 0 [pid 5028] mkdir("./805", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2397 ./strace-static-x86_64: Process 7439 attached [pid 7439] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7439] chdir("./805") = 0 [pid 7439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7439] setpgid(0, 0) = 0 [pid 7439] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7439] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7439] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7439] write(3, "1000", 4) = 4 [pid 7439] close(3) = 0 [pid 7439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7439] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7439] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7439] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7440 attached [pid 7440] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7439] <... clone3 resumed> => {parent_tid=[2398]}, 88) = 2398 [pid 7440] set_robust_list(0x7feeffcce9a0, 24 [pid 7439] rt_sigprocmask(SIG_SETMASK, [], [pid 7440] <... set_robust_list resumed>) = 0 [pid 7440] rt_sigprocmask(SIG_SETMASK, [], [pid 7439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7440] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7440] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7439] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7440] memfd_create("syzkaller", 0 [pid 7439] <... futex resumed>) = 0 [pid 7440] <... memfd_create resumed>) = 3 [pid 7439] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7440] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7440] munmap(0x7feef78ae000, 2097152) = 0 [pid 7440] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7440] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7440] close(3) = 0 [pid 7440] mkdir("./file0", 0777) = 0 [pid 7440] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7440] chdir("./file0") = 0 [pid 7440] ioctl(4, LOOP_CLR_FD) = 0 [pid 7440] close(4) = 0 [pid 7440] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7439] <... futex resumed>) = 0 [pid 7440] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7439] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7440] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7439] <... futex resumed>) = 0 [pid 7439] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7440] <... openat resumed>) = 4 [pid 7440] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7439] <... futex resumed>) = 0 [pid 7439] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7440] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7439] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7440] <... openat resumed>) = 5 [pid 7440] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7440] <... futex resumed>) = 0 [pid 7439] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7440] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7439] <... futex resumed>) = 0 [ 250.899427][ T7440] loop0: detected capacity change from 0 to 4096 [ 250.923119][ T7440] ntfs: volume version 3.1. [pid 7439] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7439] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7439] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7441 attached [pid 7441] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7439] <... clone3 resumed> => {parent_tid=[2399]}, 88) = 2399 [pid 7439] rt_sigprocmask(SIG_SETMASK, [], [pid 7441] <... rseq resumed>) = 0 [pid 7439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7441] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7439] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7441] rt_sigprocmask(SIG_SETMASK, [], [pid 7439] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7441] ftruncate(4, 0) = 0 [pid 7441] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7440] <... write resumed>) = 1048064 [pid 7439] <... futex resumed>) = 0 [pid 7441] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7440] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7440] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7439] close(3) = 0 [pid 7439] close(4) = 0 [pid 7439] close(5) = 0 [pid 7439] close(6) = -1 EBADF (Bad file descriptor) [pid 7439] close(7) = -1 EBADF (Bad file descriptor) [pid 7439] close(8) = -1 EBADF (Bad file descriptor) [pid 7439] close(9) = -1 EBADF (Bad file descriptor) [pid 7439] close(10) = -1 EBADF (Bad file descriptor) [pid 7439] close(11) = -1 EBADF (Bad file descriptor) [pid 7439] close(12) = -1 EBADF (Bad file descriptor) [pid 7439] close(13) = -1 EBADF (Bad file descriptor) [pid 7439] close(14) = -1 EBADF (Bad file descriptor) [pid 7439] close(15) = -1 EBADF (Bad file descriptor) [pid 7439] close(16) = -1 EBADF (Bad file descriptor) [pid 7439] close(17) = -1 EBADF (Bad file descriptor) [pid 7439] close(18) = -1 EBADF (Bad file descriptor) [pid 7439] close(19) = -1 EBADF (Bad file descriptor) [pid 7439] close(20) = -1 EBADF (Bad file descriptor) [pid 7439] close(21) = -1 EBADF (Bad file descriptor) [pid 7439] close(22) = -1 EBADF (Bad file descriptor) [pid 7439] close(23) = -1 EBADF (Bad file descriptor) [pid 7439] close(24) = -1 EBADF (Bad file descriptor) [pid 7439] close(25) = -1 EBADF (Bad file descriptor) [pid 7439] close(26) = -1 EBADF (Bad file descriptor) [pid 7439] close(27) = -1 EBADF (Bad file descriptor) [pid 7439] close(28) = -1 EBADF (Bad file descriptor) [pid 7439] close(29) = -1 EBADF (Bad file descriptor) [pid 7439] exit_group(0) = ? [pid 7440] <... futex resumed>) = ? [pid 7440] +++ exited with 0 +++ [pid 7441] <... futex resumed>) = ? [pid 7441] +++ exited with 0 +++ [pid 7439] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2397, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./805", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./805", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./805/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./805/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./805/cgroup.cpu") = 0 [pid 5028] umount2("./805/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./805/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./805/binderfs") = 0 [pid 5028] umount2("./805/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./805/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./805/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./805/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./805/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./805/file0") = 0 [pid 5028] umount2("./805/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./805/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./805/cgroup") = 0 [pid 5028] umount2("./805/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./805/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./805/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./805") = 0 [pid 5028] mkdir("./806", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7442 attached , child_tidptr=0x5555563a5690) = 2400 [pid 7442] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7442] chdir("./806") = 0 [pid 7442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7442] setpgid(0, 0) = 0 [pid 7442] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7442] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7442] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7442] write(3, "1000", 4) = 4 [pid 7442] close(3) = 0 [pid 7442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7442] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7442] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7442] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7443 attached => {parent_tid=[2401]}, 88) = 2401 [pid 7443] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7442] rt_sigprocmask(SIG_SETMASK, [], [pid 7443] <... rseq resumed>) = 0 [pid 7442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7443] set_robust_list(0x7feeffcce9a0, 24 [pid 7442] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7442] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7443] <... set_robust_list resumed>) = 0 [pid 7443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7443] memfd_create("syzkaller", 0) = 3 [pid 7443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7443] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7443] munmap(0x7feef78ae000, 2097152) = 0 [pid 7443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7443] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7443] close(3) = 0 [pid 7443] mkdir("./file0", 0777) = 0 [pid 7443] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7443] chdir("./file0") = 0 [pid 7443] ioctl(4, LOOP_CLR_FD) = 0 [pid 7443] close(4) = 0 [pid 7443] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7442] <... futex resumed>) = 0 [pid 7443] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7442] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7442] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7443] <... openat resumed>) = 4 [pid 7443] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7442] <... futex resumed>) = 0 [pid 7442] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7443] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7442] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7443] <... openat resumed>) = 5 [pid 7443] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7442] <... futex resumed>) = 0 [pid 7443] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7442] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 251.136066][ T7443] loop0: detected capacity change from 0 to 4096 [ 251.157941][ T7443] ntfs: volume version 3.1. [pid 7442] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7442] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7442] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7442] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7444 attached => {parent_tid=[2402]}, 88) = 2402 [pid 7444] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7442] rt_sigprocmask(SIG_SETMASK, [], [pid 7444] <... rseq resumed>) = 0 [pid 7444] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7442] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7444] rt_sigprocmask(SIG_SETMASK, [], [pid 7442] <... futex resumed>) = 0 [pid 7444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7444] ftruncate(4, 0 [pid 7442] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7444] <... ftruncate resumed>) = 0 [pid 7444] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7444] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7442] <... futex resumed>) = 0 [pid 7443] <... write resumed>) = 1048064 [pid 7443] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7442] close(3 [pid 7443] <... futex resumed>) = 0 [pid 7443] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7442] <... close resumed>) = 0 [pid 7442] close(4) = 0 [pid 7442] close(5) = 0 [pid 7442] close(6) = -1 EBADF (Bad file descriptor) [pid 7442] close(7) = -1 EBADF (Bad file descriptor) [pid 7442] close(8) = -1 EBADF (Bad file descriptor) [pid 7442] close(9) = -1 EBADF (Bad file descriptor) [pid 7442] close(10) = -1 EBADF (Bad file descriptor) [pid 7442] close(11) = -1 EBADF (Bad file descriptor) [pid 7442] close(12) = -1 EBADF (Bad file descriptor) [pid 7442] close(13) = -1 EBADF (Bad file descriptor) [pid 7442] close(14) = -1 EBADF (Bad file descriptor) [pid 7442] close(15) = -1 EBADF (Bad file descriptor) [pid 7442] close(16) = -1 EBADF (Bad file descriptor) [pid 7442] close(17) = -1 EBADF (Bad file descriptor) [pid 7442] close(18) = -1 EBADF (Bad file descriptor) [pid 7442] close(19) = -1 EBADF (Bad file descriptor) [pid 7442] close(20) = -1 EBADF (Bad file descriptor) [pid 7442] close(21) = -1 EBADF (Bad file descriptor) [pid 7442] close(22) = -1 EBADF (Bad file descriptor) [pid 7442] close(23) = -1 EBADF (Bad file descriptor) [pid 7442] close(24) = -1 EBADF (Bad file descriptor) [pid 7442] close(25) = -1 EBADF (Bad file descriptor) [pid 7442] close(26) = -1 EBADF (Bad file descriptor) [pid 7442] close(27) = -1 EBADF (Bad file descriptor) [pid 7442] close(28) = -1 EBADF (Bad file descriptor) [pid 7442] close(29) = -1 EBADF (Bad file descriptor) [pid 7442] exit_group(0) = ? [pid 7444] <... futex resumed>) = ? [pid 7443] <... futex resumed>) = ? [pid 7444] +++ exited with 0 +++ [pid 7443] +++ exited with 0 +++ [pid 7442] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2400, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./806", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./806", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./806/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./806/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./806/cgroup.cpu") = 0 [pid 5028] umount2("./806/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./806/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./806/binderfs") = 0 [pid 5028] umount2("./806/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./806/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./806/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./806/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./806/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./806/file0") = 0 [pid 5028] umount2("./806/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./806/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./806/cgroup") = 0 [pid 5028] umount2("./806/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./806/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./806/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./806") = 0 [pid 5028] mkdir("./807", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2403 ./strace-static-x86_64: Process 7445 attached [pid 7445] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7445] chdir("./807") = 0 [pid 7445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7445] setpgid(0, 0) = 0 [pid 7445] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7445] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7445] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7445] write(3, "1000", 4) = 4 [pid 7445] close(3) = 0 [pid 7445] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7445] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7445] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7445] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7446 attached [pid 7446] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7445] <... clone3 resumed> => {parent_tid=[2404]}, 88) = 2404 [pid 7446] <... rseq resumed>) = 0 [pid 7445] rt_sigprocmask(SIG_SETMASK, [], [pid 7446] set_robust_list(0x7feeffcce9a0, 24 [pid 7445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7446] <... set_robust_list resumed>) = 0 [pid 7445] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] rt_sigprocmask(SIG_SETMASK, [], [pid 7445] <... futex resumed>) = 0 [pid 7446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7445] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7446] memfd_create("syzkaller", 0) = 3 [pid 7446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7446] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7446] munmap(0x7feef78ae000, 2097152) = 0 [pid 7446] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7446] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7446] close(3) = 0 [pid 7446] mkdir("./file0", 0777) = 0 [pid 7446] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7446] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7446] chdir("./file0") = 0 [pid 7446] ioctl(4, LOOP_CLR_FD) = 0 [pid 7446] close(4) = 0 [pid 7446] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7445] <... futex resumed>) = 0 [pid 7445] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7446] <... futex resumed>) = 1 [pid 7445] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7446] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7446] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7445] <... futex resumed>) = 0 [pid 7446] <... futex resumed>) = 1 [pid 7445] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7445] <... futex resumed>) = 0 [pid 7446] <... openat resumed>) = 5 [pid 7445] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7446] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7446] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7445] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 251.364682][ T7446] loop0: detected capacity change from 0 to 4096 [ 251.385598][ T7446] ntfs: volume version 3.1. [pid 7445] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7445] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7445] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7445] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7445] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2405]}, 88) = 2405 [pid 7445] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7447 attached [pid 7447] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7447] <... rseq resumed>) = 0 [pid 7445] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7447] set_robust_list(0x7feef7aad9a0, 24 [pid 7445] <... futex resumed>) = 0 [pid 7447] <... set_robust_list resumed>) = 0 [pid 7447] rt_sigprocmask(SIG_SETMASK, [], [pid 7445] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7447] ftruncate(4, 0) = 0 [pid 7446] <... write resumed>) = 1048064 [pid 7447] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7446] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7447] <... futex resumed>) = 1 [pid 7445] <... futex resumed>) = 0 [pid 7447] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] close(3) = 0 [pid 7445] close(4) = 0 [pid 7445] close(5) = 0 [pid 7445] close(6) = -1 EBADF (Bad file descriptor) [pid 7445] close(7) = -1 EBADF (Bad file descriptor) [pid 7445] close(8) = -1 EBADF (Bad file descriptor) [pid 7445] close(9) = -1 EBADF (Bad file descriptor) [pid 7445] close(10) = -1 EBADF (Bad file descriptor) [pid 7445] close(11) = -1 EBADF (Bad file descriptor) [pid 7445] close(12) = -1 EBADF (Bad file descriptor) [pid 7445] close(13) = -1 EBADF (Bad file descriptor) [pid 7445] close(14) = -1 EBADF (Bad file descriptor) [pid 7445] close(15) = -1 EBADF (Bad file descriptor) [pid 7445] close(16) = -1 EBADF (Bad file descriptor) [pid 7445] close(17) = -1 EBADF (Bad file descriptor) [pid 7445] close(18) = -1 EBADF (Bad file descriptor) [pid 7445] close(19) = -1 EBADF (Bad file descriptor) [pid 7445] close(20) = -1 EBADF (Bad file descriptor) [pid 7445] close(21) = -1 EBADF (Bad file descriptor) [pid 7446] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7445] close(22) = -1 EBADF (Bad file descriptor) [pid 7445] close(23) = -1 EBADF (Bad file descriptor) [pid 7445] close(24) = -1 EBADF (Bad file descriptor) [pid 7445] close(25) = -1 EBADF (Bad file descriptor) [pid 7445] close(26) = -1 EBADF (Bad file descriptor) [pid 7445] close(27) = -1 EBADF (Bad file descriptor) [pid 7445] close(28) = -1 EBADF (Bad file descriptor) [pid 7445] close(29) = -1 EBADF (Bad file descriptor) [pid 7445] exit_group(0) = ? [pid 7446] <... futex resumed>) = ? [pid 7447] <... futex resumed>) = ? [pid 7446] +++ exited with 0 +++ [pid 7447] +++ exited with 0 +++ [pid 7445] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2403, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./807", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./807", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./807/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./807/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./807/cgroup.cpu") = 0 [pid 5028] umount2("./807/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./807/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./807/binderfs") = 0 [pid 5028] umount2("./807/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./807/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./807/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./807/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./807/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./807/file0") = 0 [pid 5028] umount2("./807/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./807/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./807/cgroup") = 0 [pid 5028] umount2("./807/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./807/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./807/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./807") = 0 [pid 5028] mkdir("./808", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7448 attached , child_tidptr=0x5555563a5690) = 2406 [pid 7448] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7448] chdir("./808") = 0 [pid 7448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7448] setpgid(0, 0) = 0 [pid 7448] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7448] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7448] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7448] write(3, "1000", 4) = 4 [pid 7448] close(3) = 0 [pid 7448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7448] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7448] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7449 attached [pid 7449] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7448] <... clone3 resumed> => {parent_tid=[2407]}, 88) = 2407 [pid 7449] <... rseq resumed>) = 0 [pid 7448] rt_sigprocmask(SIG_SETMASK, [], [pid 7449] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7449] rt_sigprocmask(SIG_SETMASK, [], [pid 7448] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7448] <... futex resumed>) = 0 [pid 7449] memfd_create("syzkaller", 0 [pid 7448] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7449] <... memfd_create resumed>) = 3 [pid 7449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7449] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7449] munmap(0x7feef78ae000, 2097152) = 0 [pid 7449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7449] close(3) = 0 [pid 7449] mkdir("./file0", 0777) = 0 [pid 7449] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7449] chdir("./file0") = 0 [pid 7449] ioctl(4, LOOP_CLR_FD) = 0 [pid 7449] close(4) = 0 [pid 7449] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7448] <... futex resumed>) = 0 [pid 7448] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7449] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7449] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7449] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] <... futex resumed>) = 0 [pid 7448] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7449] <... futex resumed>) = 0 [pid 7449] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7449] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7449] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7448] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7449] <... futex resumed>) = 0 [pid 7448] <... futex resumed>) = 1 [pid 7449] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 251.595609][ T7449] loop0: detected capacity change from 0 to 4096 [ 251.618069][ T7449] ntfs: volume version 3.1. [pid 7448] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7448] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7448] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7450 attached [pid 7450] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7448] <... clone3 resumed> => {parent_tid=[2408]}, 88) = 2408 [pid 7450] set_robust_list(0x7feef7aad9a0, 24 [pid 7448] rt_sigprocmask(SIG_SETMASK, [], [pid 7450] <... set_robust_list resumed>) = 0 [pid 7448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7448] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7450] ftruncate(4, 0 [pid 7448] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7450] <... ftruncate resumed>) = 0 [pid 7449] <... write resumed>) = 1048064 [pid 7449] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7449] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7450] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7448] <... futex resumed>) = 0 [pid 7450] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7448] close(3) = 0 [pid 7448] close(4) = 0 [pid 7448] close(5) = 0 [pid 7448] close(6) = -1 EBADF (Bad file descriptor) [pid 7448] close(7) = -1 EBADF (Bad file descriptor) [pid 7448] close(8) = -1 EBADF (Bad file descriptor) [pid 7448] close(9) = -1 EBADF (Bad file descriptor) [pid 7448] close(10) = -1 EBADF (Bad file descriptor) [pid 7448] close(11) = -1 EBADF (Bad file descriptor) [pid 7448] close(12) = -1 EBADF (Bad file descriptor) [pid 7448] close(13) = -1 EBADF (Bad file descriptor) [pid 7448] close(14) = -1 EBADF (Bad file descriptor) [pid 7448] close(15) = -1 EBADF (Bad file descriptor) [pid 7448] close(16) = -1 EBADF (Bad file descriptor) [pid 7448] close(17) = -1 EBADF (Bad file descriptor) [pid 7448] close(18) = -1 EBADF (Bad file descriptor) [pid 7448] close(19) = -1 EBADF (Bad file descriptor) [pid 7448] close(20) = -1 EBADF (Bad file descriptor) [pid 7448] close(21) = -1 EBADF (Bad file descriptor) [pid 7448] close(22) = -1 EBADF (Bad file descriptor) [pid 7448] close(23) = -1 EBADF (Bad file descriptor) [pid 7448] close(24) = -1 EBADF (Bad file descriptor) [pid 7448] close(25) = -1 EBADF (Bad file descriptor) [pid 7448] close(26) = -1 EBADF (Bad file descriptor) [pid 7448] close(27) = -1 EBADF (Bad file descriptor) [pid 7448] close(28) = -1 EBADF (Bad file descriptor) [pid 7448] close(29) = -1 EBADF (Bad file descriptor) [pid 7448] exit_group(0) = ? [pid 7450] <... futex resumed>) = ? [pid 7449] <... futex resumed>) = ? [pid 7450] +++ exited with 0 +++ [pid 7449] +++ exited with 0 +++ [pid 7448] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2406, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./808", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./808", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./808/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./808/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./808/cgroup.cpu") = 0 [pid 5028] umount2("./808/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./808/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./808/binderfs") = 0 [pid 5028] umount2("./808/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./808/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./808/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./808/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./808/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./808/file0") = 0 [pid 5028] umount2("./808/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./808/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./808/cgroup") = 0 [pid 5028] umount2("./808/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./808/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./808/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./808") = 0 [pid 5028] mkdir("./809", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7451 attached , child_tidptr=0x5555563a5690) = 2409 [pid 7451] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7451] chdir("./809") = 0 [pid 7451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7451] setpgid(0, 0) = 0 [pid 7451] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7451] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7451] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7451] write(3, "1000", 4) = 4 [pid 7451] close(3) = 0 [pid 7451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7451] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7451] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7451] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7451] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7451] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7451] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7452 attached [pid 7452] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7451] <... clone3 resumed> => {parent_tid=[2410]}, 88) = 2410 [pid 7452] <... rseq resumed>) = 0 [pid 7452] set_robust_list(0x7feeffcce9a0, 24 [pid 7451] rt_sigprocmask(SIG_SETMASK, [], [pid 7452] <... set_robust_list resumed>) = 0 [pid 7452] rt_sigprocmask(SIG_SETMASK, [], [pid 7451] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7451] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7451] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7452] memfd_create("syzkaller", 0) = 3 [pid 7452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7452] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7452] munmap(0x7feef78ae000, 2097152) = 0 [pid 7452] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7452] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7452] close(3) = 0 [pid 7452] mkdir("./file0", 0777) = 0 [pid 7452] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7452] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7452] chdir("./file0") = 0 [pid 7452] ioctl(4, LOOP_CLR_FD) = 0 [pid 7452] close(4) = 0 [pid 7452] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7451] <... futex resumed>) = 0 [pid 7452] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7451] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7452] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7451] <... futex resumed>) = 0 [pid 7451] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7452] <... openat resumed>) = 4 [pid 7452] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7451] <... futex resumed>) = 0 [pid 7451] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7452] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7451] <... futex resumed>) = 0 [pid 7452] <... openat resumed>) = 5 [pid 7452] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7451] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7452] <... futex resumed>) = 0 [pid 7451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7452] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7451] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7452] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7451] <... futex resumed>) = 0 [ 251.821392][ T7452] loop0: detected capacity change from 0 to 4096 [ 251.844051][ T7452] ntfs: volume version 3.1. [pid 7451] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7451] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7451] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7451] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7451] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7451] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7453 attached => {parent_tid=[2411]}, 88) = 2411 [pid 7451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7451] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7451] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7453] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7453] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7453] ftruncate(4, 0) = 0 [pid 7452] <... write resumed>) = 1048064 [pid 7452] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7452] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7453] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7451] <... futex resumed>) = 0 [pid 7453] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7451] close(3) = 0 [pid 7451] close(4) = 0 [pid 7451] close(5) = 0 [pid 7451] close(6) = -1 EBADF (Bad file descriptor) [pid 7451] close(7) = -1 EBADF (Bad file descriptor) [pid 7451] close(8) = -1 EBADF (Bad file descriptor) [pid 7451] close(9) = -1 EBADF (Bad file descriptor) [pid 7451] close(10) = -1 EBADF (Bad file descriptor) [pid 7451] close(11) = -1 EBADF (Bad file descriptor) [pid 7451] close(12) = -1 EBADF (Bad file descriptor) [pid 7451] close(13) = -1 EBADF (Bad file descriptor) [pid 7451] close(14) = -1 EBADF (Bad file descriptor) [pid 7451] close(15) = -1 EBADF (Bad file descriptor) [pid 7451] close(16) = -1 EBADF (Bad file descriptor) [pid 7451] close(17) = -1 EBADF (Bad file descriptor) [pid 7451] close(18) = -1 EBADF (Bad file descriptor) [pid 7451] close(19) = -1 EBADF (Bad file descriptor) [pid 7451] close(20) = -1 EBADF (Bad file descriptor) [pid 7451] close(21) = -1 EBADF (Bad file descriptor) [pid 7451] close(22) = -1 EBADF (Bad file descriptor) [pid 7451] close(23) = -1 EBADF (Bad file descriptor) [pid 7451] close(24) = -1 EBADF (Bad file descriptor) [pid 7451] close(25) = -1 EBADF (Bad file descriptor) [pid 7451] close(26) = -1 EBADF (Bad file descriptor) [pid 7451] close(27) = -1 EBADF (Bad file descriptor) [pid 7451] close(28) = -1 EBADF (Bad file descriptor) [pid 7451] close(29) = -1 EBADF (Bad file descriptor) [pid 7451] exit_group(0) = ? [pid 7453] <... futex resumed>) = ? [pid 7452] <... futex resumed>) = ? [pid 7453] +++ exited with 0 +++ [pid 7452] +++ exited with 0 +++ [pid 7451] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2409, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./809", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./809", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./809/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./809/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./809/cgroup.cpu") = 0 [pid 5028] umount2("./809/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./809/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./809/binderfs") = 0 [pid 5028] umount2("./809/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./809/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./809/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./809/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./809/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./809/file0") = 0 [pid 5028] umount2("./809/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./809/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./809/cgroup") = 0 [pid 5028] umount2("./809/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./809/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./809/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./809") = 0 [pid 5028] mkdir("./810", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7454 attached , child_tidptr=0x5555563a5690) = 2412 [pid 7454] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7454] chdir("./810") = 0 [pid 7454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7454] setpgid(0, 0) = 0 [pid 7454] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7454] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7454] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7454] write(3, "1000", 4) = 4 [pid 7454] close(3) = 0 [pid 7454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7454] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7454] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7454] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7454] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7455 attached [pid 7455] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7454] <... clone3 resumed> => {parent_tid=[2413]}, 88) = 2413 [pid 7455] set_robust_list(0x7feeffcce9a0, 24 [pid 7454] rt_sigprocmask(SIG_SETMASK, [], [pid 7455] <... set_robust_list resumed>) = 0 [pid 7454] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7455] rt_sigprocmask(SIG_SETMASK, [], [pid 7454] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7454] <... futex resumed>) = 0 [pid 7454] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7455] memfd_create("syzkaller", 0) = 3 [pid 7455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7455] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7455] munmap(0x7feef78ae000, 2097152) = 0 [pid 7455] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7455] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7455] close(3) = 0 [pid 7455] mkdir("./file0", 0777) = 0 [ 252.040655][ T7455] loop0: detected capacity change from 0 to 4096 [ 252.049599][ T7455] __ntfs_warning: 12 callbacks suppressed [ 252.049613][ T7455] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 252.086553][ T7455] ntfs: volume version 3.1. [pid 7455] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7455] chdir("./file0") = 0 [pid 7455] ioctl(4, LOOP_CLR_FD) = 0 [pid 7455] close(4) = 0 [pid 7455] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7455] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7454] <... futex resumed>) = 0 [pid 7454] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7455] <... futex resumed>) = 0 [pid 7454] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7455] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7455] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7454] <... futex resumed>) = 0 [pid 7455] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7454] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7455] <... futex resumed>) = 0 [pid 7454] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7455] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7455] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7455] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7454] <... futex resumed>) = 0 [pid 7454] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7455] <... futex resumed>) = 0 [pid 7454] <... futex resumed>) = 1 [pid 7455] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7454] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7455] <... write resumed>) = 1048064 [pid 7455] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7454] <... futex resumed>) = 0 [pid 7455] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7454] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7455] <... futex resumed>) = 0 [pid 7454] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7455] ftruncate(4, 0) = 0 [pid 7455] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7454] <... futex resumed>) = 0 [pid 7455] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7454] close(3) = 0 [pid 7454] close(4) = 0 [pid 7454] close(5) = 0 [pid 7454] close(6) = -1 EBADF (Bad file descriptor) [pid 7454] close(7) = -1 EBADF (Bad file descriptor) [pid 7454] close(8) = -1 EBADF (Bad file descriptor) [pid 7454] close(9) = -1 EBADF (Bad file descriptor) [pid 7454] close(10) = -1 EBADF (Bad file descriptor) [pid 7454] close(11) = -1 EBADF (Bad file descriptor) [pid 7454] close(12) = -1 EBADF (Bad file descriptor) [pid 7454] close(13) = -1 EBADF (Bad file descriptor) [pid 7454] close(14) = -1 EBADF (Bad file descriptor) [pid 7454] close(15) = -1 EBADF (Bad file descriptor) [pid 7454] close(16) = -1 EBADF (Bad file descriptor) [pid 7454] close(17) = -1 EBADF (Bad file descriptor) [pid 7454] close(18) = -1 EBADF (Bad file descriptor) [pid 7454] close(19) = -1 EBADF (Bad file descriptor) [pid 7454] close(20) = -1 EBADF (Bad file descriptor) [pid 7454] close(21) = -1 EBADF (Bad file descriptor) [pid 7454] close(22) = -1 EBADF (Bad file descriptor) [pid 7454] close(23) = -1 EBADF (Bad file descriptor) [pid 7454] close(24) = -1 EBADF (Bad file descriptor) [pid 7454] close(25) = -1 EBADF (Bad file descriptor) [pid 7454] close(26) = -1 EBADF (Bad file descriptor) [pid 7454] close(27) = -1 EBADF (Bad file descriptor) [pid 7454] close(28) = -1 EBADF (Bad file descriptor) [pid 7454] close(29) = -1 EBADF (Bad file descriptor) [pid 7454] exit_group(0 [pid 7455] <... futex resumed>) = ? [pid 7455] +++ exited with 0 +++ [pid 7454] <... exit_group resumed>) = ? [pid 7454] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2412, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5028] umount2("./810", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./810", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./810/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./810/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./810/cgroup.cpu") = 0 [pid 5028] umount2("./810/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./810/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./810/binderfs") = 0 [pid 5028] umount2("./810/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./810/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./810/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./810/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./810/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./810/file0") = 0 [pid 5028] umount2("./810/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./810/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./810/cgroup") = 0 [pid 5028] umount2("./810/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./810/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./810/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./810") = 0 [pid 5028] mkdir("./811", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7456 attached , child_tidptr=0x5555563a5690) = 2414 [pid 7456] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7456] chdir("./811") = 0 [pid 7456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7456] setpgid(0, 0) = 0 [pid 7456] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7456] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7456] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7456] write(3, "1000", 4) = 4 [pid 7456] close(3) = 0 [pid 7456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7456] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7456] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7456] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7457 attached [pid 7457] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7456] <... clone3 resumed> => {parent_tid=[2415]}, 88) = 2415 [pid 7457] <... rseq resumed>) = 0 [pid 7456] rt_sigprocmask(SIG_SETMASK, [], [pid 7457] set_robust_list(0x7feeffcce9a0, 24 [pid 7456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7457] <... set_robust_list resumed>) = 0 [pid 7456] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7456] <... futex resumed>) = 0 [pid 7457] memfd_create("syzkaller", 0 [pid 7456] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7457] <... memfd_create resumed>) = 3 [pid 7457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7457] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7457] munmap(0x7feef78ae000, 2097152) = 0 [pid 7457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7457] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7457] close(3) = 0 [pid 7457] mkdir("./file0", 0777) = 0 [pid 7457] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7457] chdir("./file0") = 0 [pid 7457] ioctl(4, LOOP_CLR_FD) = 0 [pid 7457] close(4) = 0 [pid 7457] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7457] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7456] <... futex resumed>) = 0 [pid 7456] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7457] <... futex resumed>) = 0 [pid 7456] <... futex resumed>) = 1 [pid 7457] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7456] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7457] <... openat resumed>) = 4 [pid 7457] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7456] <... futex resumed>) = 0 [pid 7456] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7456] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7457] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7457] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7457] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7456] <... futex resumed>) = 0 [ 252.291891][ T7457] loop0: detected capacity change from 0 to 4096 [ 252.301352][ T7457] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 252.333857][ T7457] ntfs: volume version 3.1. [pid 7456] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7457] <... futex resumed>) = 0 [pid 7457] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7456] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7456] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7456] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7458 attached [pid 7457] <... write resumed>) = 1048064 [pid 7456] <... clone3 resumed> => {parent_tid=[2416]}, 88) = 2416 [pid 7458] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7457] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7456] rt_sigprocmask(SIG_SETMASK, [], [pid 7458] <... rseq resumed>) = 0 [pid 7457] <... futex resumed>) = 0 [pid 7457] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7456] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7456] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7458] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7458] ftruncate(4, 0) = 0 [pid 7458] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7458] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7456] <... futex resumed>) = 0 [pid 7456] close(3) = 0 [pid 7456] close(4) = 0 [pid 7456] close(5) = 0 [pid 7456] close(6) = -1 EBADF (Bad file descriptor) [pid 7456] close(7) = -1 EBADF (Bad file descriptor) [pid 7456] close(8) = -1 EBADF (Bad file descriptor) [pid 7456] close(9) = -1 EBADF (Bad file descriptor) [pid 7456] close(10) = -1 EBADF (Bad file descriptor) [pid 7456] close(11) = -1 EBADF (Bad file descriptor) [pid 7456] close(12) = -1 EBADF (Bad file descriptor) [pid 7456] close(13) = -1 EBADF (Bad file descriptor) [pid 7456] close(14) = -1 EBADF (Bad file descriptor) [pid 7456] close(15) = -1 EBADF (Bad file descriptor) [pid 7456] close(16) = -1 EBADF (Bad file descriptor) [pid 7456] close(17) = -1 EBADF (Bad file descriptor) [pid 7456] close(18) = -1 EBADF (Bad file descriptor) [pid 7456] close(19) = -1 EBADF (Bad file descriptor) [pid 7456] close(20) = -1 EBADF (Bad file descriptor) [pid 7456] close(21) = -1 EBADF (Bad file descriptor) [pid 7456] close(22) = -1 EBADF (Bad file descriptor) [pid 7456] close(23) = -1 EBADF (Bad file descriptor) [pid 7456] close(24) = -1 EBADF (Bad file descriptor) [pid 7456] close(25) = -1 EBADF (Bad file descriptor) [pid 7456] close(26) = -1 EBADF (Bad file descriptor) [pid 7456] close(27) = -1 EBADF (Bad file descriptor) [pid 7456] close(28) = -1 EBADF (Bad file descriptor) [pid 7456] close(29) = -1 EBADF (Bad file descriptor) [pid 7456] exit_group(0) = ? [pid 7457] <... futex resumed>) = ? [pid 7457] +++ exited with 0 +++ [pid 7458] <... futex resumed>) = ? [pid 7458] +++ exited with 0 +++ [pid 7456] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2414, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./811", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./811", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./811/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./811/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./811/cgroup.cpu") = 0 [pid 5028] umount2("./811/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./811/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./811/binderfs") = 0 [pid 5028] umount2("./811/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./811/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./811/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./811/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./811/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./811/file0") = 0 [pid 5028] umount2("./811/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./811/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./811/cgroup") = 0 [pid 5028] umount2("./811/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./811/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./811/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./811") = 0 [pid 5028] mkdir("./812", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2417 ./strace-static-x86_64: Process 7459 attached [pid 7459] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7459] chdir("./812") = 0 [pid 7459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7459] setpgid(0, 0) = 0 [pid 7459] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7459] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7459] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7459] write(3, "1000", 4) = 4 [pid 7459] close(3) = 0 [pid 7459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7459] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7459] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7459] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7459] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7459] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7459] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7460 attached => {parent_tid=[2418]}, 88) = 2418 [pid 7459] rt_sigprocmask(SIG_SETMASK, [], [pid 7460] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7460] <... rseq resumed>) = 0 [pid 7459] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7460] set_robust_list(0x7feeffcce9a0, 24 [pid 7459] <... futex resumed>) = 0 [pid 7460] <... set_robust_list resumed>) = 0 [pid 7459] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7460] memfd_create("syzkaller", 0) = 3 [pid 7460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7460] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7460] munmap(0x7feef78ae000, 2097152) = 0 [pid 7460] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7460] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7460] close(3) = 0 [pid 7460] mkdir("./file0", 0777) = 0 [pid 7460] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7460] chdir("./file0") = 0 [pid 7460] ioctl(4, LOOP_CLR_FD) = 0 [pid 7460] close(4) = 0 [pid 7460] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7460] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7459] <... futex resumed>) = 0 [pid 7459] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7460] <... futex resumed>) = 0 [pid 7459] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7460] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7460] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7459] <... futex resumed>) = 0 [pid 7460] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7459] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7460] <... openat resumed>) = 5 [pid 7459] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7460] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7459] <... futex resumed>) = 0 [pid 7460] <... futex resumed>) = 1 [pid 7459] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7460] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7459] <... futex resumed>) = 0 [ 252.567673][ T7460] loop0: detected capacity change from 0 to 4096 [ 252.577382][ T7460] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 252.610075][ T7460] ntfs: volume version 3.1. [pid 7459] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7459] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7459] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7459] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7459] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7459] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7461 attached [pid 7461] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7459] <... clone3 resumed> => {parent_tid=[2419]}, 88) = 2419 [pid 7461] <... rseq resumed>) = 0 [pid 7459] rt_sigprocmask(SIG_SETMASK, [], [pid 7461] set_robust_list(0x7feef7aad9a0, 24 [pid 7459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7461] <... set_robust_list resumed>) = 0 [pid 7459] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7461] rt_sigprocmask(SIG_SETMASK, [], [pid 7459] <... futex resumed>) = 0 [pid 7461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7461] ftruncate(4, 0) = 0 [pid 7459] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7461] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7460] <... write resumed>) = 1048064 [pid 7459] <... futex resumed>) = 0 [pid 7461] <... futex resumed>) = 1 [pid 7460] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7461] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7460] <... futex resumed>) = 0 [pid 7460] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7459] close(3) = 0 [pid 7459] close(4) = 0 [pid 7459] close(5) = 0 [pid 7459] close(6) = -1 EBADF (Bad file descriptor) [pid 7459] close(7) = -1 EBADF (Bad file descriptor) [pid 7459] close(8) = -1 EBADF (Bad file descriptor) [pid 7459] close(9) = -1 EBADF (Bad file descriptor) [pid 7459] close(10) = -1 EBADF (Bad file descriptor) [pid 7459] close(11) = -1 EBADF (Bad file descriptor) [pid 7459] close(12) = -1 EBADF (Bad file descriptor) [pid 7459] close(13) = -1 EBADF (Bad file descriptor) [pid 7459] close(14) = -1 EBADF (Bad file descriptor) [pid 7459] close(15) = -1 EBADF (Bad file descriptor) [pid 7459] close(16) = -1 EBADF (Bad file descriptor) [pid 7459] close(17) = -1 EBADF (Bad file descriptor) [pid 7459] close(18) = -1 EBADF (Bad file descriptor) [pid 7459] close(19) = -1 EBADF (Bad file descriptor) [pid 7459] close(20) = -1 EBADF (Bad file descriptor) [pid 7459] close(21) = -1 EBADF (Bad file descriptor) [pid 7459] close(22) = -1 EBADF (Bad file descriptor) [pid 7459] close(23) = -1 EBADF (Bad file descriptor) [pid 7459] close(24) = -1 EBADF (Bad file descriptor) [pid 7459] close(25) = -1 EBADF (Bad file descriptor) [pid 7459] close(26) = -1 EBADF (Bad file descriptor) [pid 7459] close(27) = -1 EBADF (Bad file descriptor) [pid 7459] close(28) = -1 EBADF (Bad file descriptor) [pid 7459] close(29) = -1 EBADF (Bad file descriptor) [pid 7459] exit_group(0) = ? [pid 7461] <... futex resumed>) = ? [pid 7460] <... futex resumed>) = ? [pid 7461] +++ exited with 0 +++ [pid 7460] +++ exited with 0 +++ [pid 7459] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2417, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./812", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./812", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./812/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./812/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./812/cgroup.cpu") = 0 [pid 5028] umount2("./812/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./812/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./812/binderfs") = 0 [pid 5028] umount2("./812/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./812/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./812/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./812/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./812/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./812/file0") = 0 [pid 5028] umount2("./812/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./812/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./812/cgroup") = 0 [pid 5028] umount2("./812/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./812/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./812/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./812") = 0 [pid 5028] mkdir("./813", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2420 ./strace-static-x86_64: Process 7462 attached [pid 7462] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7462] chdir("./813") = 0 [pid 7462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7462] setpgid(0, 0) = 0 [pid 7462] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7462] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7462] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7462] write(3, "1000", 4) = 4 [pid 7462] close(3) = 0 [pid 7462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7462] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7462] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7462] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7463 attached [pid 7463] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7462] <... clone3 resumed> => {parent_tid=[2421]}, 88) = 2421 [pid 7462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7462] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7462] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7463] <... rseq resumed>) = 0 [pid 7463] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7463] memfd_create("syzkaller", 0) = 3 [pid 7463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7463] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7463] munmap(0x7feef78ae000, 2097152) = 0 [pid 7463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7463] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7463] close(3) = 0 [pid 7463] mkdir("./file0", 0777) = 0 [pid 7463] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7463] chdir("./file0") = 0 [pid 7463] ioctl(4, LOOP_CLR_FD) = 0 [pid 7463] close(4) = 0 [pid 7463] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7463] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7462] <... futex resumed>) = 0 [pid 7462] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7463] <... futex resumed>) = 0 [pid 7462] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7463] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7463] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7462] <... futex resumed>) = 0 [pid 7463] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7462] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7463] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7462] <... futex resumed>) = 0 [pid 7462] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7463] <... openat resumed>) = 5 [pid 7463] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7462] <... futex resumed>) = 0 [pid 7463] <... futex resumed>) = 1 [pid 7462] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7463] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7462] <... futex resumed>) = 0 [ 252.806160][ T7463] loop0: detected capacity change from 0 to 4096 [ 252.815335][ T7463] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 252.847301][ T7463] ntfs: volume version 3.1. [pid 7462] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7462] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7462] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7464 attached [pid 7464] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7462] <... clone3 resumed> => {parent_tid=[2422]}, 88) = 2422 [pid 7464] set_robust_list(0x7feef7aad9a0, 24 [pid 7462] rt_sigprocmask(SIG_SETMASK, [], [pid 7464] <... set_robust_list resumed>) = 0 [pid 7462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7464] rt_sigprocmask(SIG_SETMASK, [], [pid 7462] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7464] ftruncate(4, 0 [pid 7462] <... futex resumed>) = 0 [pid 7462] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7464] <... ftruncate resumed>) = 0 [pid 7464] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7463] <... write resumed>) = 1048064 [pid 7464] <... futex resumed>) = 1 [pid 7463] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7464] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7462] <... futex resumed>) = 0 [pid 7463] <... futex resumed>) = 0 [pid 7462] close(3 [pid 7463] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7462] <... close resumed>) = 0 [pid 7462] close(4) = 0 [pid 7462] close(5) = 0 [pid 7462] close(6) = -1 EBADF (Bad file descriptor) [pid 7462] close(7) = -1 EBADF (Bad file descriptor) [pid 7462] close(8) = -1 EBADF (Bad file descriptor) [pid 7462] close(9) = -1 EBADF (Bad file descriptor) [pid 7462] close(10) = -1 EBADF (Bad file descriptor) [pid 7462] close(11) = -1 EBADF (Bad file descriptor) [pid 7462] close(12) = -1 EBADF (Bad file descriptor) [pid 7462] close(13) = -1 EBADF (Bad file descriptor) [pid 7462] close(14) = -1 EBADF (Bad file descriptor) [pid 7462] close(15) = -1 EBADF (Bad file descriptor) [pid 7462] close(16) = -1 EBADF (Bad file descriptor) [pid 7462] close(17) = -1 EBADF (Bad file descriptor) [pid 7462] close(18) = -1 EBADF (Bad file descriptor) [pid 7462] close(19) = -1 EBADF (Bad file descriptor) [pid 7462] close(20) = -1 EBADF (Bad file descriptor) [pid 7462] close(21) = -1 EBADF (Bad file descriptor) [pid 7462] close(22) = -1 EBADF (Bad file descriptor) [pid 7462] close(23) = -1 EBADF (Bad file descriptor) [pid 7462] close(24) = -1 EBADF (Bad file descriptor) [pid 7462] close(25) = -1 EBADF (Bad file descriptor) [pid 7462] close(26) = -1 EBADF (Bad file descriptor) [pid 7462] close(27) = -1 EBADF (Bad file descriptor) [pid 7462] close(28) = -1 EBADF (Bad file descriptor) [pid 7462] close(29) = -1 EBADF (Bad file descriptor) [pid 7462] exit_group(0 [pid 7463] <... futex resumed>) = ? [pid 7462] <... exit_group resumed>) = ? [pid 7464] <... futex resumed>) = ? [pid 7463] +++ exited with 0 +++ [pid 7464] +++ exited with 0 +++ [pid 7462] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2420, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./813", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./813", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./813/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./813/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./813/cgroup.cpu") = 0 [pid 5028] umount2("./813/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./813/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./813/binderfs") = 0 [pid 5028] umount2("./813/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./813/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./813/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./813/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./813/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./813/file0") = 0 [pid 5028] umount2("./813/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./813/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./813/cgroup") = 0 [pid 5028] umount2("./813/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./813/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./813/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./813") = 0 [pid 5028] mkdir("./814", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7465 attached [pid 7465] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7465] chdir("./814") = 0 [pid 7465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7465] setpgid(0, 0) = 0 [pid 7465] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2423 [pid 7465] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7465] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7465] write(3, "1000", 4) = 4 [pid 7465] close(3) = 0 [pid 7465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7465] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7465] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7465] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7466 attached [pid 7466] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7465] <... clone3 resumed> => {parent_tid=[2424]}, 88) = 2424 [pid 7465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7466] <... rseq resumed>) = 0 [pid 7465] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7466] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7465] <... futex resumed>) = 0 [pid 7466] rt_sigprocmask(SIG_SETMASK, [], [pid 7465] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7466] memfd_create("syzkaller", 0) = 3 [pid 7466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7466] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7466] munmap(0x7feef78ae000, 2097152) = 0 [pid 7466] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7466] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7466] close(3) = 0 [pid 7466] mkdir("./file0", 0777) = 0 [pid 7466] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7466] chdir("./file0") = 0 [pid 7466] ioctl(4, LOOP_CLR_FD) = 0 [pid 7466] close(4) = 0 [pid 7466] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7466] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7465] <... futex resumed>) = 0 [pid 7465] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7466] <... futex resumed>) = 0 [pid 7465] <... futex resumed>) = 1 [pid 7466] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7465] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7466] <... openat resumed>) = 4 [pid 7466] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7466] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7465] <... futex resumed>) = 0 [pid 7465] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7465] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7466] <... futex resumed>) = 0 [pid 7466] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7466] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7466] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7465] <... futex resumed>) = 0 [pid 7465] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7466] <... futex resumed>) = 0 [pid 7465] <... futex resumed>) = 1 [pid 7466] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 253.033214][ T7466] loop0: detected capacity change from 0 to 4096 [ 253.042153][ T7466] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 253.076356][ T7466] ntfs: volume version 3.1. [pid 7465] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7465] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7465] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2425]}, 88) = 2425 [pid 7465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7467 attached [pid 7467] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7465] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7467] set_robust_list(0x7feef7aad9a0, 24 [pid 7465] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7467] <... set_robust_list resumed>) = 0 [pid 7467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7467] ftruncate(4, 0) = 0 [pid 7467] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7466] <... write resumed>) = 1048064 [pid 7466] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7467] <... futex resumed>) = 1 [pid 7466] <... futex resumed>) = 0 [pid 7465] <... futex resumed>) = 0 [pid 7466] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7465] close(3) = 0 [pid 7465] close(4 [pid 7467] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7465] <... close resumed>) = 0 [pid 7465] close(5) = 0 [pid 7465] close(6) = -1 EBADF (Bad file descriptor) [pid 7465] close(7) = -1 EBADF (Bad file descriptor) [pid 7465] close(8) = -1 EBADF (Bad file descriptor) [pid 7465] close(9) = -1 EBADF (Bad file descriptor) [pid 7465] close(10) = -1 EBADF (Bad file descriptor) [pid 7465] close(11) = -1 EBADF (Bad file descriptor) [pid 7465] close(12) = -1 EBADF (Bad file descriptor) [pid 7465] close(13) = -1 EBADF (Bad file descriptor) [pid 7465] close(14) = -1 EBADF (Bad file descriptor) [pid 7465] close(15) = -1 EBADF (Bad file descriptor) [pid 7465] close(16) = -1 EBADF (Bad file descriptor) [pid 7465] close(17) = -1 EBADF (Bad file descriptor) [pid 7465] close(18) = -1 EBADF (Bad file descriptor) [pid 7465] close(19) = -1 EBADF (Bad file descriptor) [pid 7465] close(20) = -1 EBADF (Bad file descriptor) [pid 7465] close(21) = -1 EBADF (Bad file descriptor) [pid 7465] close(22) = -1 EBADF (Bad file descriptor) [pid 7465] close(23) = -1 EBADF (Bad file descriptor) [pid 7465] close(24) = -1 EBADF (Bad file descriptor) [pid 7465] close(25) = -1 EBADF (Bad file descriptor) [pid 7465] close(26) = -1 EBADF (Bad file descriptor) [pid 7465] close(27) = -1 EBADF (Bad file descriptor) [pid 7465] close(28) = -1 EBADF (Bad file descriptor) [pid 7465] close(29) = -1 EBADF (Bad file descriptor) [pid 7465] exit_group(0 [pid 7467] <... futex resumed>) = ? [pid 7466] <... futex resumed>) = ? [pid 7465] <... exit_group resumed>) = ? [pid 7467] +++ exited with 0 +++ [pid 7466] +++ exited with 0 +++ [pid 7465] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2423, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./814", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./814", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./814/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./814/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./814/cgroup.cpu") = 0 [pid 5028] umount2("./814/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./814/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./814/binderfs") = 0 [pid 5028] umount2("./814/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./814/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./814/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./814/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./814/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./814/file0") = 0 [pid 5028] umount2("./814/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./814/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./814/cgroup") = 0 [pid 5028] umount2("./814/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./814/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./814/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./814") = 0 [pid 5028] mkdir("./815", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7468 attached [pid 7468] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2426 [pid 7468] <... set_robust_list resumed>) = 0 [pid 7468] chdir("./815") = 0 [pid 7468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7468] setpgid(0, 0) = 0 [pid 7468] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7468] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7468] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7468] write(3, "1000", 4) = 4 [pid 7468] close(3) = 0 [pid 7468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7468] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7468] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7468] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7468] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7468] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7469 attached => {parent_tid=[2427]}, 88) = 2427 [pid 7468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7469] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7468] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7469] <... rseq resumed>) = 0 [pid 7468] <... futex resumed>) = 0 [pid 7468] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7469] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7469] memfd_create("syzkaller", 0) = 3 [pid 7469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7469] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7469] munmap(0x7feef78ae000, 2097152) = 0 [pid 7469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7469] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7469] close(3) = 0 [pid 7469] mkdir("./file0", 0777) = 0 [pid 7469] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7469] chdir("./file0") = 0 [pid 7469] ioctl(4, LOOP_CLR_FD) = 0 [pid 7469] close(4) = 0 [pid 7469] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7469] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7468] <... futex resumed>) = 0 [pid 7468] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7469] <... futex resumed>) = 0 [pid 7468] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7469] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7469] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7468] <... futex resumed>) = 0 [pid 7469] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7468] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7468] <... futex resumed>) = 0 [pid 7469] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7468] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7469] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7469] <... futex resumed>) = 0 [pid 7468] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7469] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7468] <... futex resumed>) = 0 [ 253.290597][ T7469] loop0: detected capacity change from 0 to 4096 [ 253.300167][ T7469] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 253.331587][ T7469] ntfs: volume version 3.1. [pid 7468] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7468] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7468] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7468] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7470 attached [pid 7470] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7468] <... clone3 resumed> => {parent_tid=[2428]}, 88) = 2428 [pid 7468] rt_sigprocmask(SIG_SETMASK, [], [pid 7470] <... rseq resumed>) = 0 [pid 7468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7470] set_robust_list(0x7feef7aad9a0, 24 [pid 7468] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7470] <... set_robust_list resumed>) = 0 [pid 7468] <... futex resumed>) = 0 [pid 7470] rt_sigprocmask(SIG_SETMASK, [], [pid 7468] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7470] ftruncate(4, 0) = 0 [pid 7470] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7469] <... write resumed>) = 1048064 [pid 7468] <... futex resumed>) = 0 [pid 7470] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7469] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7469] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7468] close(3) = 0 [pid 7468] close(4) = 0 [pid 7468] close(5) = 0 [pid 7468] close(6) = -1 EBADF (Bad file descriptor) [pid 7468] close(7) = -1 EBADF (Bad file descriptor) [pid 7468] close(8) = -1 EBADF (Bad file descriptor) [pid 7468] close(9) = -1 EBADF (Bad file descriptor) [pid 7468] close(10) = -1 EBADF (Bad file descriptor) [pid 7468] close(11) = -1 EBADF (Bad file descriptor) [pid 7468] close(12) = -1 EBADF (Bad file descriptor) [pid 7468] close(13) = -1 EBADF (Bad file descriptor) [pid 7468] close(14) = -1 EBADF (Bad file descriptor) [pid 7468] close(15) = -1 EBADF (Bad file descriptor) [pid 7468] close(16) = -1 EBADF (Bad file descriptor) [pid 7468] close(17) = -1 EBADF (Bad file descriptor) [pid 7468] close(18) = -1 EBADF (Bad file descriptor) [pid 7468] close(19) = -1 EBADF (Bad file descriptor) [pid 7468] close(20) = -1 EBADF (Bad file descriptor) [pid 7468] close(21) = -1 EBADF (Bad file descriptor) [pid 7468] close(22) = -1 EBADF (Bad file descriptor) [pid 7468] close(23) = -1 EBADF (Bad file descriptor) [pid 7468] close(24) = -1 EBADF (Bad file descriptor) [pid 7468] close(25) = -1 EBADF (Bad file descriptor) [pid 7468] close(26) = -1 EBADF (Bad file descriptor) [pid 7468] close(27) = -1 EBADF (Bad file descriptor) [pid 7468] close(28) = -1 EBADF (Bad file descriptor) [pid 7468] close(29) = -1 EBADF (Bad file descriptor) [pid 7468] exit_group(0 [pid 7470] <... futex resumed>) = ? [pid 7469] <... futex resumed>) = ? [pid 7468] <... exit_group resumed>) = ? [pid 7470] +++ exited with 0 +++ [pid 7469] +++ exited with 0 +++ [pid 7468] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2426, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./815", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./815", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./815/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./815/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./815/cgroup.cpu") = 0 [pid 5028] umount2("./815/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./815/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./815/binderfs") = 0 [pid 5028] umount2("./815/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./815/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./815/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./815/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./815/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./815/file0") = 0 [pid 5028] umount2("./815/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./815/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./815/cgroup") = 0 [pid 5028] umount2("./815/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./815/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./815/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./815") = 0 [pid 5028] mkdir("./816", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2429 ./strace-static-x86_64: Process 7471 attached [pid 7471] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7471] chdir("./816") = 0 [pid 7471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7471] setpgid(0, 0) = 0 [pid 7471] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7471] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7471] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7471] write(3, "1000", 4) = 4 [pid 7471] close(3) = 0 [pid 7471] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7471] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7471] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7471] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7471] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7471] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2430]}, 88) = 2430 [pid 7471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7471] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7472 attached ) = 0 [pid 7471] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7472] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7472] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7472] memfd_create("syzkaller", 0) = 3 [pid 7472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7472] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7472] munmap(0x7feef78ae000, 2097152) = 0 [pid 7472] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7472] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7472] close(3) = 0 [pid 7472] mkdir("./file0", 0777) = 0 [pid 7472] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7472] chdir("./file0") = 0 [pid 7472] ioctl(4, LOOP_CLR_FD) = 0 [pid 7472] close(4) = 0 [pid 7472] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7471] <... futex resumed>) = 0 [pid 7472] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7471] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7471] <... futex resumed>) = 0 [pid 7472] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7471] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7472] <... openat resumed>) = 4 [pid 7472] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7471] <... futex resumed>) = 0 [pid 7471] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7472] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7471] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7472] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7471] <... futex resumed>) = 0 [pid 7472] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7471] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 253.544587][ T7472] loop0: detected capacity change from 0 to 4096 [ 253.553510][ T7472] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 253.585857][ T7472] ntfs: volume version 3.1. [pid 7471] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7471] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7471] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7471] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7471] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2431]}, 88) = 2431 ./strace-static-x86_64: Process 7473 attached [pid 7471] rt_sigprocmask(SIG_SETMASK, [], [pid 7473] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7471] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7473] <... rseq resumed>) = 0 [pid 7471] <... futex resumed>) = 0 [pid 7473] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7473] rt_sigprocmask(SIG_SETMASK, [], [pid 7471] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7473] ftruncate(4, 0) = 0 [pid 7473] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7472] <... write resumed>) = 1048064 [pid 7473] <... futex resumed>) = 1 [pid 7471] <... futex resumed>) = 0 [pid 7472] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7473] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7472] <... futex resumed>) = 0 [pid 7471] close(3 [pid 7472] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7471] <... close resumed>) = 0 [pid 7471] close(4) = 0 [pid 7471] close(5) = 0 [pid 7471] close(6) = -1 EBADF (Bad file descriptor) [pid 7471] close(7) = -1 EBADF (Bad file descriptor) [pid 7471] close(8) = -1 EBADF (Bad file descriptor) [pid 7471] close(9) = -1 EBADF (Bad file descriptor) [pid 7471] close(10) = -1 EBADF (Bad file descriptor) [pid 7471] close(11) = -1 EBADF (Bad file descriptor) [pid 7471] close(12) = -1 EBADF (Bad file descriptor) [pid 7471] close(13) = -1 EBADF (Bad file descriptor) [pid 7471] close(14) = -1 EBADF (Bad file descriptor) [pid 7471] close(15) = -1 EBADF (Bad file descriptor) [pid 7471] close(16) = -1 EBADF (Bad file descriptor) [pid 7471] close(17) = -1 EBADF (Bad file descriptor) [pid 7471] close(18) = -1 EBADF (Bad file descriptor) [pid 7471] close(19) = -1 EBADF (Bad file descriptor) [pid 7471] close(20) = -1 EBADF (Bad file descriptor) [pid 7471] close(21) = -1 EBADF (Bad file descriptor) [pid 7471] close(22) = -1 EBADF (Bad file descriptor) [pid 7471] close(23) = -1 EBADF (Bad file descriptor) [pid 7471] close(24) = -1 EBADF (Bad file descriptor) [pid 7471] close(25) = -1 EBADF (Bad file descriptor) [pid 7471] close(26) = -1 EBADF (Bad file descriptor) [pid 7471] close(27) = -1 EBADF (Bad file descriptor) [pid 7471] close(28) = -1 EBADF (Bad file descriptor) [pid 7471] close(29) = -1 EBADF (Bad file descriptor) [pid 7471] exit_group(0 [pid 7472] <... futex resumed>) = ? [pid 7471] <... exit_group resumed>) = ? [pid 7473] <... futex resumed>) = ? [pid 7473] +++ exited with 0 +++ [pid 7472] +++ exited with 0 +++ [pid 7471] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2429, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./816", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./816", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./816/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./816/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./816/cgroup.cpu") = 0 [pid 5028] umount2("./816/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./816/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./816/binderfs") = 0 [pid 5028] umount2("./816/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./816/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./816/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./816/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./816/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./816/file0") = 0 [pid 5028] umount2("./816/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./816/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./816/cgroup") = 0 [pid 5028] umount2("./816/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./816/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./816/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./816") = 0 [pid 5028] mkdir("./817", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2432 ./strace-static-x86_64: Process 7474 attached [pid 7474] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7474] chdir("./817") = 0 [pid 7474] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7474] setpgid(0, 0) = 0 [pid 7474] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7474] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7474] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7474] write(3, "1000", 4) = 4 [pid 7474] close(3) = 0 [pid 7474] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7474] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7474] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7474] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7474] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7474] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2433]}, 88) = 2433 [pid 7474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7474] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7474] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7475 attached [pid 7475] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7475] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7475] memfd_create("syzkaller", 0) = 3 [pid 7475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7475] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7475] munmap(0x7feef78ae000, 2097152) = 0 [pid 7475] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7475] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7475] close(3) = 0 [pid 7475] mkdir("./file0", 0777) = 0 [pid 7475] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7475] chdir("./file0") = 0 [pid 7475] ioctl(4, LOOP_CLR_FD) = 0 [pid 7475] close(4) = 0 [pid 7475] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7474] <... futex resumed>) = 0 [pid 7475] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7474] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7475] <... openat resumed>) = 4 [pid 7474] <... futex resumed>) = 0 [pid 7475] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7474] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7475] <... futex resumed>) = 0 [pid 7474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7475] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7474] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7474] <... futex resumed>) = 0 [pid 7475] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7474] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7475] <... openat resumed>) = 5 [pid 7475] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7474] <... futex resumed>) = 0 [pid 7475] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7474] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7474] <... futex resumed>) = 0 [pid 7475] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 253.789405][ T7475] loop0: detected capacity change from 0 to 4096 [ 253.798634][ T7475] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 253.831481][ T7475] ntfs: volume version 3.1. [pid 7474] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7474] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7474] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7474] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7476 attached [pid 7476] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7474] <... clone3 resumed> => {parent_tid=[2434]}, 88) = 2434 [pid 7476] <... rseq resumed>) = 0 [pid 7474] rt_sigprocmask(SIG_SETMASK, [], [pid 7476] set_robust_list(0x7feef7aad9a0, 24 [pid 7474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7476] <... set_robust_list resumed>) = 0 [pid 7476] rt_sigprocmask(SIG_SETMASK, [], [pid 7474] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7476] ftruncate(4, 0 [pid 7474] <... futex resumed>) = 0 [pid 7474] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7476] <... ftruncate resumed>) = 0 [pid 7476] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7475] <... write resumed>) = 1048064 [pid 7474] <... futex resumed>) = 0 [pid 7476] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7475] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7474] close(3 [pid 7475] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7474] <... close resumed>) = 0 [pid 7474] close(4) = 0 [pid 7474] close(5) = 0 [pid 7474] close(6) = -1 EBADF (Bad file descriptor) [pid 7474] close(7) = -1 EBADF (Bad file descriptor) [pid 7474] close(8) = -1 EBADF (Bad file descriptor) [pid 7474] close(9) = -1 EBADF (Bad file descriptor) [pid 7474] close(10) = -1 EBADF (Bad file descriptor) [pid 7474] close(11) = -1 EBADF (Bad file descriptor) [pid 7474] close(12) = -1 EBADF (Bad file descriptor) [pid 7474] close(13) = -1 EBADF (Bad file descriptor) [pid 7474] close(14) = -1 EBADF (Bad file descriptor) [pid 7474] close(15) = -1 EBADF (Bad file descriptor) [pid 7474] close(16) = -1 EBADF (Bad file descriptor) [pid 7474] close(17) = -1 EBADF (Bad file descriptor) [pid 7474] close(18) = -1 EBADF (Bad file descriptor) [pid 7474] close(19) = -1 EBADF (Bad file descriptor) [pid 7474] close(20) = -1 EBADF (Bad file descriptor) [pid 7474] close(21) = -1 EBADF (Bad file descriptor) [pid 7474] close(22) = -1 EBADF (Bad file descriptor) [pid 7474] close(23) = -1 EBADF (Bad file descriptor) [pid 7474] close(24) = -1 EBADF (Bad file descriptor) [pid 7474] close(25) = -1 EBADF (Bad file descriptor) [pid 7474] close(26) = -1 EBADF (Bad file descriptor) [pid 7474] close(27) = -1 EBADF (Bad file descriptor) [pid 7474] close(28) = -1 EBADF (Bad file descriptor) [pid 7474] close(29) = -1 EBADF (Bad file descriptor) [pid 7474] exit_group(0 [pid 7476] <... futex resumed>) = ? [pid 7476] +++ exited with 0 +++ [pid 7475] <... futex resumed>) = ? [pid 7474] <... exit_group resumed>) = ? [pid 7475] +++ exited with 0 +++ [pid 7474] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2432, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./817", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./817", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./817/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./817/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./817/cgroup.cpu") = 0 [pid 5028] umount2("./817/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./817/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./817/binderfs") = 0 [pid 5028] umount2("./817/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./817/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./817/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./817/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./817/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./817/file0") = 0 [pid 5028] umount2("./817/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./817/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./817/cgroup") = 0 [pid 5028] umount2("./817/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./817/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./817/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./817") = 0 [pid 5028] mkdir("./818", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7477 attached [pid 7477] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2435 [pid 7477] <... set_robust_list resumed>) = 0 [pid 7477] chdir("./818") = 0 [pid 7477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7477] setpgid(0, 0) = 0 [pid 7477] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7477] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7477] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7477] write(3, "1000", 4) = 4 [pid 7477] close(3) = 0 [pid 7477] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7477] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7477] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7477] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7477] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7477] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7478 attached [pid 7478] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7477] <... clone3 resumed> => {parent_tid=[2436]}, 88) = 2436 [pid 7478] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7477] rt_sigprocmask(SIG_SETMASK, [], [pid 7478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7478] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7477] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7477] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7478] memfd_create("syzkaller", 0) = 3 [pid 7478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7478] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7478] munmap(0x7feef78ae000, 2097152) = 0 [pid 7478] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7478] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7478] close(3) = 0 [pid 7478] mkdir("./file0", 0777) = 0 [pid 7478] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7478] chdir("./file0") = 0 [pid 7478] ioctl(4, LOOP_CLR_FD) = 0 [pid 7478] close(4) = 0 [pid 7478] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7477] <... futex resumed>) = 0 [pid 7477] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7477] <... futex resumed>) = 0 [pid 7477] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7478] <... openat resumed>) = 4 [pid 7478] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7477] <... futex resumed>) = 0 [pid 7478] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7477] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7477] <... futex resumed>) = 0 [pid 7478] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7477] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7478] <... openat resumed>) = 5 [pid 7478] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7477] <... futex resumed>) = 0 [pid 7478] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7477] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7477] <... futex resumed>) = 0 [pid 7478] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 254.032378][ T7478] loop0: detected capacity change from 0 to 4096 [ 254.041479][ T7478] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 254.074553][ T7478] ntfs: volume version 3.1. [pid 7477] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7477] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7477] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7477] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7479 attached => {parent_tid=[2437]}, 88) = 2437 [pid 7479] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7477] rt_sigprocmask(SIG_SETMASK, [], [pid 7479] <... rseq resumed>) = 0 [pid 7477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7479] set_robust_list(0x7feef7aad9a0, 24 [pid 7477] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7479] <... set_robust_list resumed>) = 0 [pid 7479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7477] <... futex resumed>) = 0 [pid 7479] ftruncate(4, 0 [pid 7477] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7479] <... ftruncate resumed>) = 0 [pid 7479] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7478] <... write resumed>) = 1048064 [pid 7477] <... futex resumed>) = 0 [pid 7479] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7478] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7477] close(3 [pid 7478] <... futex resumed>) = 0 [pid 7477] <... close resumed>) = 0 [pid 7478] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7477] close(4) = 0 [pid 7477] close(5) = 0 [pid 7477] close(6) = -1 EBADF (Bad file descriptor) [pid 7477] close(7) = -1 EBADF (Bad file descriptor) [pid 7477] close(8) = -1 EBADF (Bad file descriptor) [pid 7477] close(9) = -1 EBADF (Bad file descriptor) [pid 7477] close(10) = -1 EBADF (Bad file descriptor) [pid 7477] close(11) = -1 EBADF (Bad file descriptor) [pid 7477] close(12) = -1 EBADF (Bad file descriptor) [pid 7477] close(13) = -1 EBADF (Bad file descriptor) [pid 7477] close(14) = -1 EBADF (Bad file descriptor) [pid 7477] close(15) = -1 EBADF (Bad file descriptor) [pid 7477] close(16) = -1 EBADF (Bad file descriptor) [pid 7477] close(17) = -1 EBADF (Bad file descriptor) [pid 7477] close(18) = -1 EBADF (Bad file descriptor) [pid 7477] close(19) = -1 EBADF (Bad file descriptor) [pid 7477] close(20) = -1 EBADF (Bad file descriptor) [pid 7477] close(21) = -1 EBADF (Bad file descriptor) [pid 7477] close(22) = -1 EBADF (Bad file descriptor) [pid 7477] close(23) = -1 EBADF (Bad file descriptor) [pid 7477] close(24) = -1 EBADF (Bad file descriptor) [pid 7477] close(25) = -1 EBADF (Bad file descriptor) [pid 7477] close(26) = -1 EBADF (Bad file descriptor) [pid 7477] close(27) = -1 EBADF (Bad file descriptor) [pid 7477] close(28) = -1 EBADF (Bad file descriptor) [pid 7477] close(29) = -1 EBADF (Bad file descriptor) [pid 7477] exit_group(0 [pid 7479] <... futex resumed>) = ? [pid 7479] +++ exited with 0 +++ [pid 7477] <... exit_group resumed>) = ? [pid 7478] <... futex resumed>) = ? [pid 7478] +++ exited with 0 +++ [pid 7477] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2435, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./818", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./818", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./818/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./818/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./818/cgroup.cpu") = 0 [pid 5028] umount2("./818/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./818/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./818/binderfs") = 0 [pid 5028] umount2("./818/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./818/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./818/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./818/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./818/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./818/file0") = 0 [pid 5028] umount2("./818/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./818/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./818/cgroup") = 0 [pid 5028] umount2("./818/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./818/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./818/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./818") = 0 [pid 5028] mkdir("./819", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7480 attached , child_tidptr=0x5555563a5690) = 2438 [pid 7480] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7480] chdir("./819") = 0 [pid 7480] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7480] setpgid(0, 0) = 0 [pid 7480] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7480] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7480] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7480] write(3, "1000", 4) = 4 [pid 7480] close(3) = 0 [pid 7480] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7480] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7480] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7480] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7480] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7480] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7480] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7481 attached [pid 7481] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7480] <... clone3 resumed> => {parent_tid=[2439]}, 88) = 2439 [pid 7481] <... rseq resumed>) = 0 [pid 7480] rt_sigprocmask(SIG_SETMASK, [], [pid 7481] set_robust_list(0x7feeffcce9a0, 24 [pid 7480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7481] <... set_robust_list resumed>) = 0 [pid 7480] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7480] <... futex resumed>) = 0 [pid 7481] memfd_create("syzkaller", 0 [pid 7480] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7481] <... memfd_create resumed>) = 3 [pid 7481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7481] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7481] munmap(0x7feef78ae000, 2097152) = 0 [pid 7481] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7481] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7481] close(3) = 0 [pid 7481] mkdir("./file0", 0777) = 0 [pid 7481] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7481] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7481] chdir("./file0") = 0 [pid 7481] ioctl(4, LOOP_CLR_FD) = 0 [pid 7481] close(4) = 0 [pid 7481] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7480] <... futex resumed>) = 0 [pid 7481] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7480] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7480] <... futex resumed>) = 0 [pid 7481] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7480] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7481] <... openat resumed>) = 4 [pid 7481] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7480] <... futex resumed>) = 0 [pid 7481] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7480] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7480] <... futex resumed>) = 0 [pid 7481] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7480] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7481] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7481] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7480] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7481] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7480] <... futex resumed>) = 0 [ 254.276983][ T7481] loop0: detected capacity change from 0 to 4096 [ 254.286556][ T7481] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 254.319682][ T7481] ntfs: volume version 3.1. [pid 7480] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7480] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7480] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7480] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7480] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7482 attached => {parent_tid=[2440]}, 88) = 2440 [pid 7482] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7480] rt_sigprocmask(SIG_SETMASK, [], [pid 7482] set_robust_list(0x7feef7aad9a0, 24 [pid 7480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7482] <... set_robust_list resumed>) = 0 [pid 7482] rt_sigprocmask(SIG_SETMASK, [], [pid 7480] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7480] <... futex resumed>) = 0 [pid 7482] ftruncate(4, 0 [pid 7480] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7482] <... ftruncate resumed>) = 0 [pid 7482] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7481] <... write resumed>) = 1048064 [pid 7480] <... futex resumed>) = 0 [pid 7482] <... futex resumed>) = 1 [pid 7481] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7482] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7481] <... futex resumed>) = 0 [pid 7481] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7480] close(3) = 0 [pid 7480] close(4) = 0 [pid 7480] close(5) = 0 [pid 7480] close(6) = -1 EBADF (Bad file descriptor) [pid 7480] close(7) = -1 EBADF (Bad file descriptor) [pid 7480] close(8) = -1 EBADF (Bad file descriptor) [pid 7480] close(9) = -1 EBADF (Bad file descriptor) [pid 7480] close(10) = -1 EBADF (Bad file descriptor) [pid 7480] close(11) = -1 EBADF (Bad file descriptor) [pid 7480] close(12) = -1 EBADF (Bad file descriptor) [pid 7480] close(13) = -1 EBADF (Bad file descriptor) [pid 7480] close(14) = -1 EBADF (Bad file descriptor) [pid 7480] close(15) = -1 EBADF (Bad file descriptor) [pid 7480] close(16) = -1 EBADF (Bad file descriptor) [pid 7480] close(17) = -1 EBADF (Bad file descriptor) [pid 7480] close(18) = -1 EBADF (Bad file descriptor) [pid 7480] close(19) = -1 EBADF (Bad file descriptor) [pid 7480] close(20) = -1 EBADF (Bad file descriptor) [pid 7480] close(21) = -1 EBADF (Bad file descriptor) [pid 7480] close(22) = -1 EBADF (Bad file descriptor) [pid 7480] close(23) = -1 EBADF (Bad file descriptor) [pid 7480] close(24) = -1 EBADF (Bad file descriptor) [pid 7480] close(25) = -1 EBADF (Bad file descriptor) [pid 7480] close(26) = -1 EBADF (Bad file descriptor) [pid 7480] close(27) = -1 EBADF (Bad file descriptor) [pid 7480] close(28) = -1 EBADF (Bad file descriptor) [pid 7480] close(29) = -1 EBADF (Bad file descriptor) [pid 7480] exit_group(0) = ? [pid 7482] <... futex resumed>) = ? [pid 7481] <... futex resumed>) = ? [pid 7482] +++ exited with 0 +++ [pid 7481] +++ exited with 0 +++ [pid 7480] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2438, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./819", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./819", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./819/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./819/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./819/cgroup.cpu") = 0 [pid 5028] umount2("./819/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./819/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./819/binderfs") = 0 [pid 5028] umount2("./819/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./819/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./819/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./819/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./819/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./819/file0") = 0 [pid 5028] umount2("./819/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./819/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./819/cgroup") = 0 [pid 5028] umount2("./819/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./819/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./819/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./819") = 0 [pid 5028] mkdir("./820", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2441 ./strace-static-x86_64: Process 7483 attached [pid 7483] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7483] chdir("./820") = 0 [pid 7483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7483] setpgid(0, 0) = 0 [pid 7483] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7483] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7483] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7483] write(3, "1000", 4) = 4 [pid 7483] close(3) = 0 [pid 7483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7483] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7483] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7483] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7484 attached [pid 7484] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7483] <... clone3 resumed> => {parent_tid=[2442]}, 88) = 2442 [pid 7484] set_robust_list(0x7feeffcce9a0, 24 [pid 7483] rt_sigprocmask(SIG_SETMASK, [], [pid 7484] <... set_robust_list resumed>) = 0 [pid 7484] rt_sigprocmask(SIG_SETMASK, [], [pid 7483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7484] memfd_create("syzkaller", 0 [pid 7483] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7483] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7484] <... memfd_create resumed>) = 3 [pid 7484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7484] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7484] munmap(0x7feef78ae000, 2097152) = 0 [pid 7484] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7484] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7484] close(3) = 0 [pid 7484] mkdir("./file0", 0777) = 0 [pid 7484] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7484] chdir("./file0") = 0 [pid 7484] ioctl(4, LOOP_CLR_FD) = 0 [pid 7484] close(4) = 0 [pid 7484] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7483] <... futex resumed>) = 0 [pid 7484] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7483] <... futex resumed>) = 0 [pid 7484] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7483] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7484] <... openat resumed>) = 4 [pid 7484] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7483] <... futex resumed>) = 0 [pid 7484] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7483] <... futex resumed>) = 0 [pid 7484] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7483] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7484] <... openat resumed>) = 5 [pid 7484] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7483] <... futex resumed>) = 0 [pid 7484] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7483] <... futex resumed>) = 0 [pid 7484] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 254.521709][ T7484] loop0: detected capacity change from 0 to 4096 [ 254.544041][ T7484] ntfs: volume version 3.1. [pid 7483] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7483] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7483] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7483] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7485 attached [pid 7485] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7485] set_robust_list(0x7feef7aad9a0, 24 [pid 7483] <... clone3 resumed> => {parent_tid=[2443]}, 88) = 2443 [pid 7485] <... set_robust_list resumed>) = 0 [pid 7483] rt_sigprocmask(SIG_SETMASK, [], [pid 7485] rt_sigprocmask(SIG_SETMASK, [], [pid 7483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7483] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7485] ftruncate(4, 0) = 0 [pid 7483] <... futex resumed>) = 0 [pid 7485] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7484] <... write resumed>) = 1048064 [pid 7483] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7485] <... futex resumed>) = 0 [pid 7484] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7485] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7484] <... futex resumed>) = 0 [pid 7483] close(3 [pid 7484] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7483] <... close resumed>) = 0 [pid 7483] close(4) = 0 [pid 7483] close(5) = 0 [pid 7483] close(6) = -1 EBADF (Bad file descriptor) [pid 7483] close(7) = -1 EBADF (Bad file descriptor) [pid 7483] close(8) = -1 EBADF (Bad file descriptor) [pid 7483] close(9) = -1 EBADF (Bad file descriptor) [pid 7483] close(10) = -1 EBADF (Bad file descriptor) [pid 7483] close(11) = -1 EBADF (Bad file descriptor) [pid 7483] close(12) = -1 EBADF (Bad file descriptor) [pid 7483] close(13) = -1 EBADF (Bad file descriptor) [pid 7483] close(14) = -1 EBADF (Bad file descriptor) [pid 7483] close(15) = -1 EBADF (Bad file descriptor) [pid 7483] close(16) = -1 EBADF (Bad file descriptor) [pid 7483] close(17) = -1 EBADF (Bad file descriptor) [pid 7483] close(18) = -1 EBADF (Bad file descriptor) [pid 7483] close(19) = -1 EBADF (Bad file descriptor) [pid 7483] close(20) = -1 EBADF (Bad file descriptor) [pid 7483] close(21) = -1 EBADF (Bad file descriptor) [pid 7483] close(22) = -1 EBADF (Bad file descriptor) [pid 7483] close(23) = -1 EBADF (Bad file descriptor) [pid 7483] close(24) = -1 EBADF (Bad file descriptor) [pid 7483] close(25) = -1 EBADF (Bad file descriptor) [pid 7483] close(26) = -1 EBADF (Bad file descriptor) [pid 7483] close(27) = -1 EBADF (Bad file descriptor) [pid 7483] close(28) = -1 EBADF (Bad file descriptor) [pid 7483] close(29) = -1 EBADF (Bad file descriptor) [pid 7483] exit_group(0 [pid 7485] <... futex resumed>) = ? [pid 7485] +++ exited with 0 +++ [pid 7484] <... futex resumed>) = ? [pid 7483] <... exit_group resumed>) = ? [pid 7484] +++ exited with 0 +++ [pid 7483] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2441, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./820", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./820", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./820/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./820/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./820/cgroup.cpu") = 0 [pid 5028] umount2("./820/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./820/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./820/binderfs") = 0 [pid 5028] umount2("./820/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./820/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./820/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./820/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./820/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./820/file0") = 0 [pid 5028] umount2("./820/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./820/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./820/cgroup") = 0 [pid 5028] umount2("./820/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./820/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./820/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./820") = 0 [pid 5028] mkdir("./821", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7486 attached , child_tidptr=0x5555563a5690) = 2444 [pid 7486] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7486] chdir("./821") = 0 [pid 7486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7486] setpgid(0, 0) = 0 [pid 7486] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7486] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7486] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7486] write(3, "1000", 4) = 4 [pid 7486] close(3) = 0 [pid 7486] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7486] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7486] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7486] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7486] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7486] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7487 attached [pid 7487] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7486] <... clone3 resumed> => {parent_tid=[2445]}, 88) = 2445 [pid 7487] <... rseq resumed>) = 0 [pid 7486] rt_sigprocmask(SIG_SETMASK, [], [pid 7487] set_robust_list(0x7feeffcce9a0, 24 [pid 7486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7487] <... set_robust_list resumed>) = 0 [pid 7486] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7486] <... futex resumed>) = 0 [pid 7487] memfd_create("syzkaller", 0 [pid 7486] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7487] <... memfd_create resumed>) = 3 [pid 7487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7487] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7487] munmap(0x7feef78ae000, 2097152) = 0 [pid 7487] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7487] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7487] close(3) = 0 [pid 7487] mkdir("./file0", 0777) = 0 [pid 7487] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7487] chdir("./file0") = 0 [pid 7487] ioctl(4, LOOP_CLR_FD) = 0 [pid 7487] close(4) = 0 [pid 7487] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7486] <... futex resumed>) = 0 [pid 7487] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7486] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7486] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7487] <... openat resumed>) = 4 [pid 7487] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7486] <... futex resumed>) = 0 [pid 7486] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7486] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7487] <... futex resumed>) = 1 [pid 7487] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7487] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7486] <... futex resumed>) = 0 [pid 7487] <... futex resumed>) = 1 [pid 7486] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7487] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7486] <... futex resumed>) = 0 [ 254.730529][ T7487] loop0: detected capacity change from 0 to 4096 [ 254.751891][ T7487] ntfs: volume version 3.1. [pid 7486] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7486] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7486] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7486] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7488 attached [pid 7488] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7486] <... clone3 resumed> => {parent_tid=[2446]}, 88) = 2446 [pid 7486] rt_sigprocmask(SIG_SETMASK, [], [pid 7488] <... rseq resumed>) = 0 [pid 7486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7488] set_robust_list(0x7feef7aad9a0, 24 [pid 7486] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7488] <... set_robust_list resumed>) = 0 [pid 7488] rt_sigprocmask(SIG_SETMASK, [], [pid 7486] <... futex resumed>) = 0 [pid 7488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7486] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7488] ftruncate(4, 0) = 0 [pid 7488] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7487] <... write resumed>) = 1048064 [pid 7488] <... futex resumed>) = 1 [pid 7488] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7487] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7486] <... futex resumed>) = 0 [pid 7487] <... futex resumed>) = 0 [pid 7487] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7486] close(3) = 0 [pid 7486] close(4) = 0 [pid 7486] close(5) = 0 [pid 7486] close(6) = -1 EBADF (Bad file descriptor) [pid 7486] close(7) = -1 EBADF (Bad file descriptor) [pid 7486] close(8) = -1 EBADF (Bad file descriptor) [pid 7486] close(9) = -1 EBADF (Bad file descriptor) [pid 7486] close(10) = -1 EBADF (Bad file descriptor) [pid 7486] close(11) = -1 EBADF (Bad file descriptor) [pid 7486] close(12) = -1 EBADF (Bad file descriptor) [pid 7486] close(13) = -1 EBADF (Bad file descriptor) [pid 7486] close(14) = -1 EBADF (Bad file descriptor) [pid 7486] close(15) = -1 EBADF (Bad file descriptor) [pid 7486] close(16) = -1 EBADF (Bad file descriptor) [pid 7486] close(17) = -1 EBADF (Bad file descriptor) [pid 7486] close(18) = -1 EBADF (Bad file descriptor) [pid 7486] close(19) = -1 EBADF (Bad file descriptor) [pid 7486] close(20) = -1 EBADF (Bad file descriptor) [pid 7486] close(21) = -1 EBADF (Bad file descriptor) [pid 7486] close(22) = -1 EBADF (Bad file descriptor) [pid 7486] close(23) = -1 EBADF (Bad file descriptor) [pid 7486] close(24) = -1 EBADF (Bad file descriptor) [pid 7486] close(25) = -1 EBADF (Bad file descriptor) [pid 7486] close(26) = -1 EBADF (Bad file descriptor) [pid 7486] close(27) = -1 EBADF (Bad file descriptor) [pid 7486] close(28) = -1 EBADF (Bad file descriptor) [pid 7486] close(29) = -1 EBADF (Bad file descriptor) [pid 7486] exit_group(0) = ? [pid 7487] <... futex resumed>) = ? [pid 7488] <... futex resumed>) = ? [pid 7487] +++ exited with 0 +++ [pid 7488] +++ exited with 0 +++ [pid 7486] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2444, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./821", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./821", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./821/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./821/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./821/cgroup.cpu") = 0 [pid 5028] umount2("./821/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./821/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./821/binderfs") = 0 [pid 5028] umount2("./821/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./821/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./821/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./821/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./821/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./821/file0") = 0 [pid 5028] umount2("./821/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./821/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./821/cgroup") = 0 [pid 5028] umount2("./821/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./821/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./821/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./821") = 0 [pid 5028] mkdir("./822", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2447 ./strace-static-x86_64: Process 7489 attached [pid 7489] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7489] chdir("./822") = 0 [pid 7489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7489] setpgid(0, 0) = 0 [pid 7489] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7489] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7489] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7489] write(3, "1000", 4) = 4 [pid 7489] close(3) = 0 [pid 7489] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7489] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7489] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7489] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7489] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7489] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7489] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7490 attached [pid 7490] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7489] <... clone3 resumed> => {parent_tid=[2448]}, 88) = 2448 [pid 7490] <... rseq resumed>) = 0 [pid 7489] rt_sigprocmask(SIG_SETMASK, [], [pid 7490] set_robust_list(0x7feeffcce9a0, 24 [pid 7489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7490] <... set_robust_list resumed>) = 0 [pid 7490] rt_sigprocmask(SIG_SETMASK, [], [pid 7489] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7489] <... futex resumed>) = 0 [pid 7489] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7490] memfd_create("syzkaller", 0) = 3 [pid 7490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7490] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7490] munmap(0x7feef78ae000, 2097152) = 0 [pid 7490] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7490] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7490] close(3) = 0 [pid 7490] mkdir("./file0", 0777) = 0 [pid 7490] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7490] chdir("./file0") = 0 [pid 7490] ioctl(4, LOOP_CLR_FD) = 0 [pid 7490] close(4) = 0 [pid 7490] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7489] <... futex resumed>) = 0 [pid 7489] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7489] <... futex resumed>) = 0 [pid 7489] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7490] <... openat resumed>) = 4 [pid 7490] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7489] <... futex resumed>) = 0 [pid 7490] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7489] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7490] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7489] <... futex resumed>) = 0 [pid 7489] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7490] <... openat resumed>) = 5 [pid 7490] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7489] <... futex resumed>) = 0 [pid 7490] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7489] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] <... futex resumed>) = 0 [pid 7489] <... futex resumed>) = 1 [pid 7490] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 254.949956][ T7490] loop0: detected capacity change from 0 to 4096 [ 254.971467][ T7490] ntfs: volume version 3.1. [pid 7489] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7489] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7489] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7489] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7489] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7491 attached [pid 7491] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7489] <... clone3 resumed> => {parent_tid=[2449]}, 88) = 2449 [pid 7491] <... rseq resumed>) = 0 [pid 7489] rt_sigprocmask(SIG_SETMASK, [], [pid 7491] set_robust_list(0x7feef7aad9a0, 24 [pid 7489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7491] <... set_robust_list resumed>) = 0 [pid 7489] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7491] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7489] <... futex resumed>) = 0 [pid 7489] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7491] ftruncate(4, 0) = 0 [pid 7491] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7490] <... write resumed>) = 1048064 [pid 7489] <... futex resumed>) = 0 [pid 7490] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7489] close(3 [pid 7490] <... futex resumed>) = 0 [pid 7489] <... close resumed>) = 0 [pid 7490] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7491] <... futex resumed>) = 1 [pid 7489] close(4) = 0 [pid 7491] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7489] close(5) = 0 [pid 7489] close(6) = -1 EBADF (Bad file descriptor) [pid 7489] close(7) = -1 EBADF (Bad file descriptor) [pid 7489] close(8) = -1 EBADF (Bad file descriptor) [pid 7489] close(9) = -1 EBADF (Bad file descriptor) [pid 7489] close(10) = -1 EBADF (Bad file descriptor) [pid 7489] close(11) = -1 EBADF (Bad file descriptor) [pid 7489] close(12) = -1 EBADF (Bad file descriptor) [pid 7489] close(13) = -1 EBADF (Bad file descriptor) [pid 7489] close(14) = -1 EBADF (Bad file descriptor) [pid 7489] close(15) = -1 EBADF (Bad file descriptor) [pid 7489] close(16) = -1 EBADF (Bad file descriptor) [pid 7489] close(17) = -1 EBADF (Bad file descriptor) [pid 7489] close(18) = -1 EBADF (Bad file descriptor) [pid 7489] close(19) = -1 EBADF (Bad file descriptor) [pid 7489] close(20) = -1 EBADF (Bad file descriptor) [pid 7489] close(21) = -1 EBADF (Bad file descriptor) [pid 7489] close(22) = -1 EBADF (Bad file descriptor) [pid 7489] close(23) = -1 EBADF (Bad file descriptor) [pid 7489] close(24) = -1 EBADF (Bad file descriptor) [pid 7489] close(25) = -1 EBADF (Bad file descriptor) [pid 7489] close(26) = -1 EBADF (Bad file descriptor) [pid 7489] close(27) = -1 EBADF (Bad file descriptor) [pid 7489] close(28) = -1 EBADF (Bad file descriptor) [pid 7489] close(29) = -1 EBADF (Bad file descriptor) [pid 7489] exit_group(0) = ? [pid 7491] <... futex resumed>) = ? [pid 7490] <... futex resumed>) = ? [pid 7490] +++ exited with 0 +++ [pid 7491] +++ exited with 0 +++ [pid 7489] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2447, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./822", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./822", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./822/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./822/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./822/cgroup.cpu") = 0 [pid 5028] umount2("./822/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./822/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./822/binderfs") = 0 [pid 5028] umount2("./822/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./822/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./822/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./822/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./822/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./822/file0") = 0 [pid 5028] umount2("./822/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./822/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./822/cgroup") = 0 [pid 5028] umount2("./822/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./822/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./822/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./822") = 0 [pid 5028] mkdir("./823", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7492 attached , child_tidptr=0x5555563a5690) = 2450 [pid 7492] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7492] chdir("./823") = 0 [pid 7492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7492] setpgid(0, 0) = 0 [pid 7492] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7492] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7492] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7492] write(3, "1000", 4) = 4 [pid 7492] close(3) = 0 [pid 7492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7492] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7492] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7492] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7493 attached => {parent_tid=[2451]}, 88) = 2451 [pid 7493] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7492] rt_sigprocmask(SIG_SETMASK, [], [pid 7493] <... rseq resumed>) = 0 [pid 7492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7493] set_robust_list(0x7feeffcce9a0, 24 [pid 7492] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7493] <... set_robust_list resumed>) = 0 [pid 7493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7492] <... futex resumed>) = 0 [pid 7492] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7493] memfd_create("syzkaller", 0) = 3 [pid 7493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7493] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7493] munmap(0x7feef78ae000, 2097152) = 0 [pid 7493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7493] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7493] close(3) = 0 [pid 7493] mkdir("./file0", 0777) = 0 [pid 7493] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7493] chdir("./file0") = 0 [pid 7493] ioctl(4, LOOP_CLR_FD) = 0 [pid 7493] close(4) = 0 [pid 7493] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7492] <... futex resumed>) = 0 [pid 7493] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7492] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7492] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7493] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7493] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7492] <... futex resumed>) = 0 [pid 7493] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7492] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7493] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7492] <... futex resumed>) = 0 [pid 7493] <... openat resumed>) = 5 [pid 7492] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7493] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7492] <... futex resumed>) = 0 [pid 7492] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7492] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 255.177939][ T7493] loop0: detected capacity change from 0 to 4096 [ 255.198961][ T7493] ntfs: volume version 3.1. [pid 7493] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7492] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7492] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7492] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7492] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7494 attached [pid 7494] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7492] <... clone3 resumed> => {parent_tid=[2452]}, 88) = 2452 [pid 7494] set_robust_list(0x7feef7aad9a0, 24 [pid 7492] rt_sigprocmask(SIG_SETMASK, [], [pid 7494] <... set_robust_list resumed>) = 0 [pid 7492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7492] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7494] ftruncate(4, 0 [pid 7492] <... futex resumed>) = 0 [pid 7492] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7494] <... ftruncate resumed>) = 0 [pid 7493] <... write resumed>) = 1048064 [pid 7494] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7493] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7494] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7492] <... futex resumed>) = 0 [pid 7493] <... futex resumed>) = 0 [pid 7492] close(3) = 0 [pid 7492] close(4) = 0 [pid 7492] close(5) = 0 [pid 7492] close(6) = -1 EBADF (Bad file descriptor) [pid 7493] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7492] close(7) = -1 EBADF (Bad file descriptor) [pid 7492] close(8) = -1 EBADF (Bad file descriptor) [pid 7492] close(9) = -1 EBADF (Bad file descriptor) [pid 7492] close(10) = -1 EBADF (Bad file descriptor) [pid 7492] close(11) = -1 EBADF (Bad file descriptor) [pid 7492] close(12) = -1 EBADF (Bad file descriptor) [pid 7492] close(13) = -1 EBADF (Bad file descriptor) [pid 7492] close(14) = -1 EBADF (Bad file descriptor) [pid 7492] close(15) = -1 EBADF (Bad file descriptor) [pid 7492] close(16) = -1 EBADF (Bad file descriptor) [pid 7492] close(17) = -1 EBADF (Bad file descriptor) [pid 7492] close(18) = -1 EBADF (Bad file descriptor) [pid 7492] close(19) = -1 EBADF (Bad file descriptor) [pid 7492] close(20) = -1 EBADF (Bad file descriptor) [pid 7492] close(21) = -1 EBADF (Bad file descriptor) [pid 7492] close(22) = -1 EBADF (Bad file descriptor) [pid 7492] close(23) = -1 EBADF (Bad file descriptor) [pid 7492] close(24) = -1 EBADF (Bad file descriptor) [pid 7492] close(25) = -1 EBADF (Bad file descriptor) [pid 7492] close(26) = -1 EBADF (Bad file descriptor) [pid 7492] close(27) = -1 EBADF (Bad file descriptor) [pid 7492] close(28) = -1 EBADF (Bad file descriptor) [pid 7492] close(29) = -1 EBADF (Bad file descriptor) [pid 7492] exit_group(0) = ? [pid 7494] <... futex resumed>) = ? [pid 7493] <... futex resumed>) = ? [pid 7494] +++ exited with 0 +++ [pid 7493] +++ exited with 0 +++ [pid 7492] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2450, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./823", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./823", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./823/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./823/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./823/cgroup.cpu") = 0 [pid 5028] umount2("./823/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./823/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./823/binderfs") = 0 [pid 5028] umount2("./823/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./823/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./823/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./823/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./823/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./823/file0") = 0 [pid 5028] umount2("./823/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./823/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./823/cgroup") = 0 [pid 5028] umount2("./823/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./823/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./823/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./823") = 0 [pid 5028] mkdir("./824", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7495 attached [pid 7495] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2453 [pid 7495] <... set_robust_list resumed>) = 0 [pid 7495] chdir("./824") = 0 [pid 7495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7495] setpgid(0, 0) = 0 [pid 7495] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7495] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7495] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7495] write(3, "1000", 4) = 4 [pid 7495] close(3) = 0 [pid 7495] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7495] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7495] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7495] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7495] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7495] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7496 attached => {parent_tid=[2454]}, 88) = 2454 [pid 7496] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7496] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7495] rt_sigprocmask(SIG_SETMASK, [], [pid 7496] rt_sigprocmask(SIG_SETMASK, [], [pid 7495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7495] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7495] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7496] memfd_create("syzkaller", 0) = 3 [pid 7496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7496] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7496] munmap(0x7feef78ae000, 2097152) = 0 [pid 7496] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7496] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7496] close(3) = 0 [pid 7496] mkdir("./file0", 0777) = 0 [pid 7496] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7496] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7496] chdir("./file0") = 0 [pid 7496] ioctl(4, LOOP_CLR_FD) = 0 [pid 7496] close(4) = 0 [pid 7496] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7495] <... futex resumed>) = 0 [pid 7496] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7495] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7496] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7495] <... futex resumed>) = 0 [pid 7495] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7496] <... openat resumed>) = 4 [pid 7496] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7495] <... futex resumed>) = 0 [pid 7496] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7495] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7495] <... futex resumed>) = 0 [pid 7496] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7495] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7496] <... openat resumed>) = 5 [pid 7496] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7495] <... futex resumed>) = 0 [pid 7495] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7495] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7496] <... futex resumed>) = 1 [ 255.411143][ T7496] loop0: detected capacity change from 0 to 4096 [ 255.432577][ T7496] ntfs: volume version 3.1. [pid 7496] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7495] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7495] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7495] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7495] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7495] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7497 attached => {parent_tid=[2455]}, 88) = 2455 [pid 7497] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7495] rt_sigprocmask(SIG_SETMASK, [], [pid 7497] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7497] rt_sigprocmask(SIG_SETMASK, [], [pid 7495] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7495] <... futex resumed>) = 0 [pid 7497] ftruncate(4, 0 [pid 7495] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7497] <... ftruncate resumed>) = 0 [pid 7497] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7496] <... write resumed>) = 1048064 [pid 7495] <... futex resumed>) = 0 [pid 7497] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7496] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7495] close(3 [pid 7496] <... futex resumed>) = 0 [pid 7496] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7495] <... close resumed>) = 0 [pid 7495] close(4) = 0 [pid 7495] close(5) = 0 [pid 7495] close(6) = -1 EBADF (Bad file descriptor) [pid 7495] close(7) = -1 EBADF (Bad file descriptor) [pid 7495] close(8) = -1 EBADF (Bad file descriptor) [pid 7495] close(9) = -1 EBADF (Bad file descriptor) [pid 7495] close(10) = -1 EBADF (Bad file descriptor) [pid 7495] close(11) = -1 EBADF (Bad file descriptor) [pid 7495] close(12) = -1 EBADF (Bad file descriptor) [pid 7495] close(13) = -1 EBADF (Bad file descriptor) [pid 7495] close(14) = -1 EBADF (Bad file descriptor) [pid 7495] close(15) = -1 EBADF (Bad file descriptor) [pid 7495] close(16) = -1 EBADF (Bad file descriptor) [pid 7495] close(17) = -1 EBADF (Bad file descriptor) [pid 7495] close(18) = -1 EBADF (Bad file descriptor) [pid 7495] close(19) = -1 EBADF (Bad file descriptor) [pid 7495] close(20) = -1 EBADF (Bad file descriptor) [pid 7495] close(21) = -1 EBADF (Bad file descriptor) [pid 7495] close(22) = -1 EBADF (Bad file descriptor) [pid 7495] close(23) = -1 EBADF (Bad file descriptor) [pid 7495] close(24) = -1 EBADF (Bad file descriptor) [pid 7495] close(25) = -1 EBADF (Bad file descriptor) [pid 7495] close(26) = -1 EBADF (Bad file descriptor) [pid 7495] close(27) = -1 EBADF (Bad file descriptor) [pid 7495] close(28) = -1 EBADF (Bad file descriptor) [pid 7495] close(29) = -1 EBADF (Bad file descriptor) [pid 7495] exit_group(0) = ? [pid 7496] <... futex resumed>) = ? [pid 7497] <... futex resumed>) = ? [pid 7496] +++ exited with 0 +++ [pid 7497] +++ exited with 0 +++ [pid 7495] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2453, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./824", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./824", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./824/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./824/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./824/cgroup.cpu") = 0 [pid 5028] umount2("./824/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./824/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./824/binderfs") = 0 [pid 5028] umount2("./824/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./824/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./824/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./824/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./824/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./824/file0") = 0 [pid 5028] umount2("./824/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./824/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./824/cgroup") = 0 [pid 5028] umount2("./824/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./824/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./824/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./824") = 0 [pid 5028] mkdir("./825", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7498 attached , child_tidptr=0x5555563a5690) = 2456 [pid 7498] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7498] chdir("./825") = 0 [pid 7498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7498] setpgid(0, 0) = 0 [pid 7498] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7498] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7498] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7498] write(3, "1000", 4) = 4 [pid 7498] close(3) = 0 [pid 7498] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7498] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7498] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7498] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7498] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7499 attached => {parent_tid=[2457]}, 88) = 2457 [pid 7499] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7498] rt_sigprocmask(SIG_SETMASK, [], [pid 7499] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7498] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7498] <... futex resumed>) = 0 [pid 7498] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7499] memfd_create("syzkaller", 0) = 3 [pid 7499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7499] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7499] munmap(0x7feef78ae000, 2097152) = 0 [pid 7499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7499] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7499] close(3) = 0 [pid 7499] mkdir("./file0", 0777) = 0 [pid 7499] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7499] chdir("./file0") = 0 [pid 7499] ioctl(4, LOOP_CLR_FD) = 0 [pid 7499] close(4) = 0 [pid 7499] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7498] <... futex resumed>) = 0 [pid 7499] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7498] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7499] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7498] <... futex resumed>) = 0 [pid 7499] <... openat resumed>) = 4 [pid 7498] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7499] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7499] <... futex resumed>) = 0 [pid 7498] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7499] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7498] <... futex resumed>) = 0 [pid 7499] <... openat resumed>) = 5 [pid 7499] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7498] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7499] <... futex resumed>) = 0 [pid 7498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7499] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7498] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 255.635975][ T7499] loop0: detected capacity change from 0 to 4096 [ 255.657487][ T7499] ntfs: volume version 3.1. [pid 7498] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7498] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7498] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7500 attached [pid 7500] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7498] <... clone3 resumed> => {parent_tid=[2458]}, 88) = 2458 [pid 7500] set_robust_list(0x7feef7aad9a0, 24 [pid 7498] rt_sigprocmask(SIG_SETMASK, [], [pid 7500] <... set_robust_list resumed>) = 0 [pid 7500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7498] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7500] ftruncate(4, 0 [pid 7498] <... futex resumed>) = 0 [pid 7500] <... ftruncate resumed>) = 0 [pid 7499] <... write resumed>) = 1048064 [pid 7500] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7499] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7500] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7499] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7498] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7498] close(3) = 0 [pid 7498] close(4) = 0 [pid 7498] close(5) = 0 [pid 7498] close(6) = -1 EBADF (Bad file descriptor) [pid 7498] close(7) = -1 EBADF (Bad file descriptor) [pid 7498] close(8) = -1 EBADF (Bad file descriptor) [pid 7498] close(9) = -1 EBADF (Bad file descriptor) [pid 7498] close(10) = -1 EBADF (Bad file descriptor) [pid 7498] close(11) = -1 EBADF (Bad file descriptor) [pid 7498] close(12) = -1 EBADF (Bad file descriptor) [pid 7498] close(13) = -1 EBADF (Bad file descriptor) [pid 7498] close(14) = -1 EBADF (Bad file descriptor) [pid 7498] close(15) = -1 EBADF (Bad file descriptor) [pid 7498] close(16) = -1 EBADF (Bad file descriptor) [pid 7498] close(17) = -1 EBADF (Bad file descriptor) [pid 7498] close(18) = -1 EBADF (Bad file descriptor) [pid 7498] close(19) = -1 EBADF (Bad file descriptor) [pid 7498] close(20) = -1 EBADF (Bad file descriptor) [pid 7498] close(21) = -1 EBADF (Bad file descriptor) [pid 7498] close(22) = -1 EBADF (Bad file descriptor) [pid 7498] close(23) = -1 EBADF (Bad file descriptor) [pid 7498] close(24) = -1 EBADF (Bad file descriptor) [pid 7498] close(25) = -1 EBADF (Bad file descriptor) [pid 7498] close(26) = -1 EBADF (Bad file descriptor) [pid 7498] close(27) = -1 EBADF (Bad file descriptor) [pid 7498] close(28) = -1 EBADF (Bad file descriptor) [pid 7498] close(29) = -1 EBADF (Bad file descriptor) [pid 7498] exit_group(0) = ? [pid 7499] <... futex resumed>) = ? [pid 7500] <... futex resumed>) = ? [pid 7499] +++ exited with 0 +++ [pid 7500] +++ exited with 0 +++ [pid 7498] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2456, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5028] umount2("./825", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./825", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./825/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./825/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./825/cgroup.cpu") = 0 [pid 5028] umount2("./825/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./825/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./825/binderfs") = 0 [pid 5028] umount2("./825/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./825/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./825/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./825/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./825/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./825/file0") = 0 [pid 5028] umount2("./825/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./825/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./825/cgroup") = 0 [pid 5028] umount2("./825/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./825/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./825/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./825") = 0 [pid 5028] mkdir("./826", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7501 attached , child_tidptr=0x5555563a5690) = 2459 [pid 7501] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7501] chdir("./826") = 0 [pid 7501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7501] setpgid(0, 0) = 0 [pid 7501] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7501] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7501] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7501] write(3, "1000", 4) = 4 [pid 7501] close(3) = 0 [pid 7501] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7501] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7501] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7501] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7501] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7501] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7502 attached [pid 7502] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7501] <... clone3 resumed> => {parent_tid=[2460]}, 88) = 2460 [pid 7501] rt_sigprocmask(SIG_SETMASK, [], [pid 7502] <... rseq resumed>) = 0 [pid 7501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7502] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7502] rt_sigprocmask(SIG_SETMASK, [], [pid 7501] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7501] <... futex resumed>) = 0 [pid 7501] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7502] memfd_create("syzkaller", 0) = 3 [pid 7502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7502] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7502] munmap(0x7feef78ae000, 2097152) = 0 [pid 7502] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7502] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7502] close(3) = 0 [pid 7502] mkdir("./file0", 0777) = 0 [pid 7502] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7502] chdir("./file0") = 0 [pid 7502] ioctl(4, LOOP_CLR_FD) = 0 [pid 7502] close(4) = 0 [pid 7502] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7501] <... futex resumed>) = 0 [pid 7502] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7501] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7501] <... futex resumed>) = 0 [pid 7502] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7501] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7502] <... openat resumed>) = 4 [pid 7502] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7501] <... futex resumed>) = 0 [pid 7502] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7501] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7502] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7501] <... futex resumed>) = 0 [pid 7502] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7501] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7502] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7501] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7502] <... futex resumed>) = 0 [pid 7501] <... futex resumed>) = 1 [pid 7502] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 255.861447][ T7502] loop0: detected capacity change from 0 to 4096 [ 255.884221][ T7502] ntfs: volume version 3.1. [pid 7501] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7501] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7501] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7501] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7503 attached [pid 7503] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7501] <... clone3 resumed> => {parent_tid=[2461]}, 88) = 2461 [pid 7503] <... rseq resumed>) = 0 [pid 7501] rt_sigprocmask(SIG_SETMASK, [], [pid 7503] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7503] rt_sigprocmask(SIG_SETMASK, [], [pid 7501] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7501] <... futex resumed>) = 0 [pid 7503] ftruncate(4, 0 [pid 7501] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7503] <... ftruncate resumed>) = 0 [pid 7502] <... write resumed>) = 1048064 [pid 7503] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7502] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7502] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7503] <... futex resumed>) = 1 [pid 7503] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7501] <... futex resumed>) = 0 [pid 7501] close(3) = 0 [pid 7501] close(4) = 0 [pid 7501] close(5) = 0 [pid 7501] close(6) = -1 EBADF (Bad file descriptor) [pid 7501] close(7) = -1 EBADF (Bad file descriptor) [pid 7501] close(8) = -1 EBADF (Bad file descriptor) [pid 7501] close(9) = -1 EBADF (Bad file descriptor) [pid 7501] close(10) = -1 EBADF (Bad file descriptor) [pid 7501] close(11) = -1 EBADF (Bad file descriptor) [pid 7501] close(12) = -1 EBADF (Bad file descriptor) [pid 7501] close(13) = -1 EBADF (Bad file descriptor) [pid 7501] close(14) = -1 EBADF (Bad file descriptor) [pid 7501] close(15) = -1 EBADF (Bad file descriptor) [pid 7501] close(16) = -1 EBADF (Bad file descriptor) [pid 7501] close(17) = -1 EBADF (Bad file descriptor) [pid 7501] close(18) = -1 EBADF (Bad file descriptor) [pid 7501] close(19) = -1 EBADF (Bad file descriptor) [pid 7501] close(20) = -1 EBADF (Bad file descriptor) [pid 7501] close(21) = -1 EBADF (Bad file descriptor) [pid 7501] close(22) = -1 EBADF (Bad file descriptor) [pid 7501] close(23) = -1 EBADF (Bad file descriptor) [pid 7501] close(24) = -1 EBADF (Bad file descriptor) [pid 7501] close(25) = -1 EBADF (Bad file descriptor) [pid 7501] close(26) = -1 EBADF (Bad file descriptor) [pid 7501] close(27) = -1 EBADF (Bad file descriptor) [pid 7501] close(28) = -1 EBADF (Bad file descriptor) [pid 7501] close(29) = -1 EBADF (Bad file descriptor) [pid 7501] exit_group(0) = ? [pid 7503] <... futex resumed>) = ? [pid 7502] <... futex resumed>) = ? [pid 7503] +++ exited with 0 +++ [pid 7502] +++ exited with 0 +++ [pid 7501] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2459, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./826", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./826", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./826/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./826/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./826/cgroup.cpu") = 0 [pid 5028] umount2("./826/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./826/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./826/binderfs") = 0 [pid 5028] umount2("./826/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./826/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./826/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./826/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./826/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./826/file0") = 0 [pid 5028] umount2("./826/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./826/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./826/cgroup") = 0 [pid 5028] umount2("./826/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./826/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./826/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./826") = 0 [pid 5028] mkdir("./827", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2462 ./strace-static-x86_64: Process 7504 attached [pid 7504] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7504] chdir("./827") = 0 [pid 7504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7504] setpgid(0, 0) = 0 [pid 7504] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7504] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7504] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7504] write(3, "1000", 4) = 4 [pid 7504] close(3) = 0 [pid 7504] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7504] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7504] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7504] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7504] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7505 attached [pid 7505] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7504] <... clone3 resumed> => {parent_tid=[2463]}, 88) = 2463 [pid 7505] <... rseq resumed>) = 0 [pid 7504] rt_sigprocmask(SIG_SETMASK, [], [pid 7505] set_robust_list(0x7feeffcce9a0, 24 [pid 7504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7505] <... set_robust_list resumed>) = 0 [pid 7505] rt_sigprocmask(SIG_SETMASK, [], [pid 7504] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7504] <... futex resumed>) = 0 [pid 7504] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7505] memfd_create("syzkaller", 0) = 3 [pid 7505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7505] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7505] munmap(0x7feef78ae000, 2097152) = 0 [pid 7505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7505] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7505] close(3) = 0 [pid 7505] mkdir("./file0", 0777) = 0 [pid 7505] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7505] chdir("./file0") = 0 [pid 7505] ioctl(4, LOOP_CLR_FD) = 0 [pid 7505] close(4) = 0 [pid 7505] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7504] <... futex resumed>) = 0 [pid 7505] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7504] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7504] <... futex resumed>) = 0 [pid 7504] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7505] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7505] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7504] <... futex resumed>) = 0 [pid 7505] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7504] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... futex resumed>) = 0 [pid 7504] <... futex resumed>) = 1 [pid 7505] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7504] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7505] <... openat resumed>) = 5 [pid 7505] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7505] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7504] <... futex resumed>) = 0 [pid 7504] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... futex resumed>) = 0 [pid 7504] <... futex resumed>) = 1 [pid 7504] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 256.085948][ T7505] loop0: detected capacity change from 0 to 4096 [ 256.106760][ T7505] ntfs: volume version 3.1. [pid 7505] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7504] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7504] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7506 attached => {parent_tid=[2464]}, 88) = 2464 [pid 7506] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7504] rt_sigprocmask(SIG_SETMASK, [], [pid 7506] <... rseq resumed>) = 0 [pid 7506] set_robust_list(0x7feef7aad9a0, 24 [pid 7504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7506] <... set_robust_list resumed>) = 0 [pid 7504] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7504] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7506] ftruncate(4, 0) = 0 [pid 7506] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7505] <... write resumed>) = 1048064 [pid 7505] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7506] <... futex resumed>) = 1 [pid 7505] <... futex resumed>) = 0 [pid 7504] <... futex resumed>) = 0 [pid 7506] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7505] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7504] close(3) = 0 [pid 7504] close(4) = 0 [pid 7504] close(5) = 0 [pid 7504] close(6) = -1 EBADF (Bad file descriptor) [pid 7504] close(7) = -1 EBADF (Bad file descriptor) [pid 7504] close(8) = -1 EBADF (Bad file descriptor) [pid 7504] close(9) = -1 EBADF (Bad file descriptor) [pid 7504] close(10) = -1 EBADF (Bad file descriptor) [pid 7504] close(11) = -1 EBADF (Bad file descriptor) [pid 7504] close(12) = -1 EBADF (Bad file descriptor) [pid 7504] close(13) = -1 EBADF (Bad file descriptor) [pid 7504] close(14) = -1 EBADF (Bad file descriptor) [pid 7504] close(15) = -1 EBADF (Bad file descriptor) [pid 7504] close(16) = -1 EBADF (Bad file descriptor) [pid 7504] close(17) = -1 EBADF (Bad file descriptor) [pid 7504] close(18) = -1 EBADF (Bad file descriptor) [pid 7504] close(19) = -1 EBADF (Bad file descriptor) [pid 7504] close(20) = -1 EBADF (Bad file descriptor) [pid 7504] close(21) = -1 EBADF (Bad file descriptor) [pid 7504] close(22) = -1 EBADF (Bad file descriptor) [pid 7504] close(23) = -1 EBADF (Bad file descriptor) [pid 7504] close(24) = -1 EBADF (Bad file descriptor) [pid 7504] close(25) = -1 EBADF (Bad file descriptor) [pid 7504] close(26) = -1 EBADF (Bad file descriptor) [pid 7504] close(27) = -1 EBADF (Bad file descriptor) [pid 7504] close(28) = -1 EBADF (Bad file descriptor) [pid 7504] close(29) = -1 EBADF (Bad file descriptor) [pid 7504] exit_group(0 [pid 7505] <... futex resumed>) = ? [pid 7504] <... exit_group resumed>) = ? [pid 7505] +++ exited with 0 +++ [pid 7506] <... futex resumed>) = ? [pid 7506] +++ exited with 0 +++ [pid 7504] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2462, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./827", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./827", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./827/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./827/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./827/cgroup.cpu") = 0 [pid 5028] umount2("./827/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./827/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./827/binderfs") = 0 [pid 5028] umount2("./827/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./827/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./827/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./827/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./827/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./827/file0") = 0 [pid 5028] umount2("./827/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./827/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./827/cgroup") = 0 [pid 5028] umount2("./827/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./827/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./827/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./827") = 0 [pid 5028] mkdir("./828", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7507 attached , child_tidptr=0x5555563a5690) = 2465 [pid 7507] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7507] chdir("./828") = 0 [pid 7507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7507] setpgid(0, 0) = 0 [pid 7507] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7507] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7507] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7507] write(3, "1000", 4) = 4 [pid 7507] close(3) = 0 [pid 7507] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7507] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7507] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7507] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7507] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7507] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7507] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7508 attached [pid 7508] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7507] <... clone3 resumed> => {parent_tid=[2466]}, 88) = 2466 [pid 7508] <... rseq resumed>) = 0 [pid 7507] rt_sigprocmask(SIG_SETMASK, [], [pid 7508] set_robust_list(0x7feeffcce9a0, 24 [pid 7507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7508] <... set_robust_list resumed>) = 0 [pid 7507] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7507] <... futex resumed>) = 0 [pid 7508] memfd_create("syzkaller", 0 [pid 7507] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7508] <... memfd_create resumed>) = 3 [pid 7508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7508] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7508] munmap(0x7feef78ae000, 2097152) = 0 [pid 7508] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7508] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7508] close(3) = 0 [pid 7508] mkdir("./file0", 0777) = 0 [pid 7508] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7508] chdir("./file0") = 0 [pid 7508] ioctl(4, LOOP_CLR_FD) = 0 [pid 7508] close(4) = 0 [pid 7508] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7508] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7507] <... futex resumed>) = 0 [pid 7507] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7507] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7508] <... futex resumed>) = 0 [pid 7508] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7508] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7508] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7507] <... futex resumed>) = 0 [pid 7507] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7507] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7508] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7508] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7507] <... futex resumed>) = 0 [pid 7507] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7508] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 256.316946][ T7508] loop0: detected capacity change from 0 to 4096 [ 256.337056][ T7508] ntfs: volume version 3.1. [pid 7507] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7507] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7507] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7507] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7507] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7509 attached => {parent_tid=[2467]}, 88) = 2467 [pid 7509] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7507] rt_sigprocmask(SIG_SETMASK, [], [pid 7509] <... rseq resumed>) = 0 [pid 7507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7509] set_robust_list(0x7feef7aad9a0, 24 [pid 7507] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7509] <... set_robust_list resumed>) = 0 [pid 7507] <... futex resumed>) = 0 [pid 7509] rt_sigprocmask(SIG_SETMASK, [], [pid 7507] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7509] ftruncate(4, 0) = 0 [pid 7508] <... write resumed>) = 1048064 [pid 7509] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7508] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7507] <... futex resumed>) = 0 [pid 7509] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7508] <... futex resumed>) = 0 [pid 7508] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7507] close(3) = 0 [pid 7507] close(4) = 0 [pid 7507] close(5) = 0 [pid 7507] close(6) = -1 EBADF (Bad file descriptor) [pid 7507] close(7) = -1 EBADF (Bad file descriptor) [pid 7507] close(8) = -1 EBADF (Bad file descriptor) [pid 7507] close(9) = -1 EBADF (Bad file descriptor) [pid 7507] close(10) = -1 EBADF (Bad file descriptor) [pid 7507] close(11) = -1 EBADF (Bad file descriptor) [pid 7507] close(12) = -1 EBADF (Bad file descriptor) [pid 7507] close(13) = -1 EBADF (Bad file descriptor) [pid 7507] close(14) = -1 EBADF (Bad file descriptor) [pid 7507] close(15) = -1 EBADF (Bad file descriptor) [pid 7507] close(16) = -1 EBADF (Bad file descriptor) [pid 7507] close(17) = -1 EBADF (Bad file descriptor) [pid 7507] close(18) = -1 EBADF (Bad file descriptor) [pid 7507] close(19) = -1 EBADF (Bad file descriptor) [pid 7507] close(20) = -1 EBADF (Bad file descriptor) [pid 7507] close(21) = -1 EBADF (Bad file descriptor) [pid 7507] close(22) = -1 EBADF (Bad file descriptor) [pid 7507] close(23) = -1 EBADF (Bad file descriptor) [pid 7507] close(24) = -1 EBADF (Bad file descriptor) [pid 7507] close(25) = -1 EBADF (Bad file descriptor) [pid 7507] close(26) = -1 EBADF (Bad file descriptor) [pid 7507] close(27) = -1 EBADF (Bad file descriptor) [pid 7507] close(28) = -1 EBADF (Bad file descriptor) [pid 7507] close(29) = -1 EBADF (Bad file descriptor) [pid 7507] exit_group(0) = ? [pid 7509] <... futex resumed>) = ? [pid 7508] <... futex resumed>) = ? [pid 7509] +++ exited with 0 +++ [pid 7508] +++ exited with 0 +++ [pid 7507] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2465, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./828", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./828", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./828/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./828/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./828/cgroup.cpu") = 0 [pid 5028] umount2("./828/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./828/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./828/binderfs") = 0 [pid 5028] umount2("./828/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./828/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./828/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./828/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./828/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./828/file0") = 0 [pid 5028] umount2("./828/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./828/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./828/cgroup") = 0 [pid 5028] umount2("./828/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./828/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./828/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./828") = 0 [pid 5028] mkdir("./829", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7510 attached , child_tidptr=0x5555563a5690) = 2468 [pid 7510] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7510] chdir("./829") = 0 [pid 7510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7510] setpgid(0, 0) = 0 [pid 7510] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7510] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7510] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7510] write(3, "1000", 4) = 4 [pid 7510] close(3) = 0 [pid 7510] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7510] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7510] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7510] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7510] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7510] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7511 attached => {parent_tid=[2469]}, 88) = 2469 [pid 7511] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7510] rt_sigprocmask(SIG_SETMASK, [], [pid 7511] <... rseq resumed>) = 0 [pid 7510] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7511] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7510] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7511] rt_sigprocmask(SIG_SETMASK, [], [pid 7510] <... futex resumed>) = 0 [pid 7511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7510] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7511] memfd_create("syzkaller", 0) = 3 [pid 7511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7511] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7511] munmap(0x7feef78ae000, 2097152) = 0 [pid 7511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7511] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7511] close(3) = 0 [pid 7511] mkdir("./file0", 0777) = 0 [pid 7511] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7511] chdir("./file0") = 0 [pid 7511] ioctl(4, LOOP_CLR_FD) = 0 [pid 7511] close(4) = 0 [pid 7511] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7510] <... futex resumed>) = 0 [pid 7511] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7510] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7510] <... futex resumed>) = 0 [pid 7511] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7510] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7511] <... openat resumed>) = 4 [pid 7511] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7510] <... futex resumed>) = 0 [pid 7511] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7510] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7511] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7510] <... futex resumed>) = 0 [pid 7511] <... openat resumed>) = 5 [pid 7511] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7510] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7511] <... futex resumed>) = 0 [pid 7510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7511] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7510] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7510] <... futex resumed>) = 0 [pid 7511] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 256.539623][ T7511] loop0: detected capacity change from 0 to 4096 [ 256.560767][ T7511] ntfs: volume version 3.1. [pid 7510] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7510] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7510] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7510] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7512 attached [pid 7512] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7510] <... clone3 resumed> => {parent_tid=[2470]}, 88) = 2470 [pid 7510] rt_sigprocmask(SIG_SETMASK, [], [pid 7512] <... rseq resumed>) = 0 [pid 7510] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7512] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7510] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7512] rt_sigprocmask(SIG_SETMASK, [], [pid 7510] <... futex resumed>) = 0 [pid 7512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7512] ftruncate(4, 0 [pid 7510] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7512] <... ftruncate resumed>) = 0 [pid 7512] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7510] <... futex resumed>) = 0 [pid 7512] <... futex resumed>) = 1 [pid 7512] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7511] <... write resumed>) = 1048064 [pid 7511] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7510] close(3) = 0 [pid 7510] close(4) = 0 [pid 7510] close(5) = 0 [pid 7510] close(6) = -1 EBADF (Bad file descriptor) [pid 7510] close(7) = -1 EBADF (Bad file descriptor) [pid 7510] close(8) = -1 EBADF (Bad file descriptor) [pid 7510] close(9) = -1 EBADF (Bad file descriptor) [pid 7511] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7510] close(10) = -1 EBADF (Bad file descriptor) [pid 7510] close(11) = -1 EBADF (Bad file descriptor) [pid 7510] close(12) = -1 EBADF (Bad file descriptor) [pid 7510] close(13) = -1 EBADF (Bad file descriptor) [pid 7510] close(14) = -1 EBADF (Bad file descriptor) [pid 7510] close(15) = -1 EBADF (Bad file descriptor) [pid 7510] close(16) = -1 EBADF (Bad file descriptor) [pid 7510] close(17) = -1 EBADF (Bad file descriptor) [pid 7510] close(18) = -1 EBADF (Bad file descriptor) [pid 7510] close(19) = -1 EBADF (Bad file descriptor) [pid 7510] close(20) = -1 EBADF (Bad file descriptor) [pid 7510] close(21) = -1 EBADF (Bad file descriptor) [pid 7510] close(22) = -1 EBADF (Bad file descriptor) [pid 7510] close(23) = -1 EBADF (Bad file descriptor) [pid 7510] close(24) = -1 EBADF (Bad file descriptor) [pid 7510] close(25) = -1 EBADF (Bad file descriptor) [pid 7510] close(26) = -1 EBADF (Bad file descriptor) [pid 7510] close(27) = -1 EBADF (Bad file descriptor) [pid 7510] close(28) = -1 EBADF (Bad file descriptor) [pid 7510] close(29) = -1 EBADF (Bad file descriptor) [pid 7510] exit_group(0) = ? [pid 7511] <... futex resumed>) = ? [pid 7512] <... futex resumed>) = ? [pid 7511] +++ exited with 0 +++ [pid 7512] +++ exited with 0 +++ [pid 7510] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2468, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./829", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./829", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./829/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./829/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./829/cgroup.cpu") = 0 [pid 5028] umount2("./829/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./829/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./829/binderfs") = 0 [pid 5028] umount2("./829/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./829/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./829/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./829/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./829/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./829/file0") = 0 [pid 5028] umount2("./829/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./829/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./829/cgroup") = 0 [pid 5028] umount2("./829/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./829/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./829/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./829") = 0 [pid 5028] mkdir("./830", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7513 attached , child_tidptr=0x5555563a5690) = 2471 [pid 7513] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7513] chdir("./830") = 0 [pid 7513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7513] setpgid(0, 0) = 0 [pid 7513] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7513] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7513] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7513] write(3, "1000", 4) = 4 [pid 7513] close(3) = 0 [pid 7513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7513] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7513] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7513] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7513] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7513] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7514 attached [pid 7514] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7513] <... clone3 resumed> => {parent_tid=[2472]}, 88) = 2472 [pid 7514] <... rseq resumed>) = 0 [pid 7513] rt_sigprocmask(SIG_SETMASK, [], [pid 7514] set_robust_list(0x7feeffcce9a0, 24 [pid 7513] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7514] <... set_robust_list resumed>) = 0 [pid 7513] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7513] <... futex resumed>) = 0 [pid 7513] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7514] memfd_create("syzkaller", 0) = 3 [pid 7514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7514] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7514] munmap(0x7feef78ae000, 2097152) = 0 [pid 7514] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7514] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7514] close(3) = 0 [pid 7514] mkdir("./file0", 0777) = 0 [pid 7514] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7514] chdir("./file0") = 0 [pid 7514] ioctl(4, LOOP_CLR_FD) = 0 [pid 7514] close(4) = 0 [pid 7514] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7513] <... futex resumed>) = 0 [pid 7513] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7514] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7513] <... futex resumed>) = 0 [pid 7513] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7514] <... openat resumed>) = 4 [pid 7514] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7513] <... futex resumed>) = 0 [pid 7514] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7513] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7514] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7513] <... futex resumed>) = 0 [pid 7514] <... openat resumed>) = 5 [pid 7513] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7514] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7514] <... futex resumed>) = 0 [pid 7513] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7514] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7513] <... futex resumed>) = 0 [ 256.766447][ T7514] loop0: detected capacity change from 0 to 4096 [ 256.788114][ T7514] ntfs: volume version 3.1. [pid 7513] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7513] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7513] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7513] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2473]}, 88) = 2473 [pid 7513] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7515 attached [pid 7515] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7515] set_robust_list(0x7feef7aad9a0, 24 [pid 7513] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7515] <... set_robust_list resumed>) = 0 [pid 7515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7515] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7513] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7515] ftruncate(4, 0 [pid 7513] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7515] <... ftruncate resumed>) = 0 [pid 7515] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7514] <... write resumed>) = 1048064 [pid 7515] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7514] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7513] <... futex resumed>) = 0 [pid 7513] close(3 [pid 7514] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7513] <... close resumed>) = 0 [pid 7513] close(4) = 0 [pid 7513] close(5) = 0 [pid 7513] close(6) = -1 EBADF (Bad file descriptor) [pid 7513] close(7) = -1 EBADF (Bad file descriptor) [pid 7513] close(8) = -1 EBADF (Bad file descriptor) [pid 7513] close(9) = -1 EBADF (Bad file descriptor) [pid 7513] close(10) = -1 EBADF (Bad file descriptor) [pid 7513] close(11) = -1 EBADF (Bad file descriptor) [pid 7513] close(12) = -1 EBADF (Bad file descriptor) [pid 7513] close(13) = -1 EBADF (Bad file descriptor) [pid 7513] close(14) = -1 EBADF (Bad file descriptor) [pid 7513] close(15) = -1 EBADF (Bad file descriptor) [pid 7513] close(16) = -1 EBADF (Bad file descriptor) [pid 7513] close(17) = -1 EBADF (Bad file descriptor) [pid 7513] close(18) = -1 EBADF (Bad file descriptor) [pid 7513] close(19) = -1 EBADF (Bad file descriptor) [pid 7513] close(20) = -1 EBADF (Bad file descriptor) [pid 7513] close(21) = -1 EBADF (Bad file descriptor) [pid 7513] close(22) = -1 EBADF (Bad file descriptor) [pid 7513] close(23) = -1 EBADF (Bad file descriptor) [pid 7513] close(24) = -1 EBADF (Bad file descriptor) [pid 7513] close(25) = -1 EBADF (Bad file descriptor) [pid 7513] close(26) = -1 EBADF (Bad file descriptor) [pid 7513] close(27) = -1 EBADF (Bad file descriptor) [pid 7513] close(28) = -1 EBADF (Bad file descriptor) [pid 7513] close(29) = -1 EBADF (Bad file descriptor) [pid 7513] exit_group(0) = ? [pid 7514] <... futex resumed>) = ? [pid 7515] <... futex resumed>) = ? [pid 7514] +++ exited with 0 +++ [pid 7515] +++ exited with 0 +++ [pid 7513] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2471, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./830", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./830", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./830/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./830/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./830/cgroup.cpu") = 0 [pid 5028] umount2("./830/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./830/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./830/binderfs") = 0 [pid 5028] umount2("./830/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./830/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./830/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./830/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./830/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./830/file0") = 0 [pid 5028] umount2("./830/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./830/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./830/cgroup") = 0 [pid 5028] umount2("./830/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./830/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./830/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./830") = 0 [pid 5028] mkdir("./831", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2474 ./strace-static-x86_64: Process 7516 attached [pid 7516] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7516] chdir("./831") = 0 [pid 7516] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7516] setpgid(0, 0) = 0 [pid 7516] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7516] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7516] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7516] write(3, "1000", 4) = 4 [pid 7516] close(3) = 0 [pid 7516] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7516] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7516] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7516] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7516] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7516] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7517 attached => {parent_tid=[2475]}, 88) = 2475 [pid 7516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7517] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7516] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7517] set_robust_list(0x7feeffcce9a0, 24 [pid 7516] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7517] <... set_robust_list resumed>) = 0 [pid 7517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7517] memfd_create("syzkaller", 0) = 3 [pid 7517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7517] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7517] munmap(0x7feef78ae000, 2097152) = 0 [pid 7517] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7517] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7517] close(3) = 0 [pid 7517] mkdir("./file0", 0777) = 0 [pid 7517] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7517] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7517] chdir("./file0") = 0 [pid 7517] ioctl(4, LOOP_CLR_FD) = 0 [pid 7517] close(4) = 0 [pid 7517] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7516] <... futex resumed>) = 0 [pid 7516] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7516] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7517] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7517] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7516] <... futex resumed>) = 0 [pid 7517] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7516] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7516] <... futex resumed>) = 0 [pid 7517] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7516] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7517] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7517] <... futex resumed>) = 0 [pid 7516] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7517] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7516] <... futex resumed>) = 0 [ 256.996940][ T7517] loop0: detected capacity change from 0 to 4096 [ 257.018820][ T7517] ntfs: volume version 3.1. [pid 7516] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7516] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7516] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7516] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7518 attached [pid 7518] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7516] <... clone3 resumed> => {parent_tid=[2476]}, 88) = 2476 [pid 7518] <... rseq resumed>) = 0 [pid 7516] rt_sigprocmask(SIG_SETMASK, [], [pid 7518] set_robust_list(0x7feef7aad9a0, 24 [pid 7516] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7518] <... set_robust_list resumed>) = 0 [pid 7516] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7516] <... futex resumed>) = 0 [pid 7516] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7518] ftruncate(4, 0) = 0 [pid 7518] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7518] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7516] <... futex resumed>) = 0 [pid 7517] <... write resumed>) = 1048064 [pid 7517] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7517] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7516] close(3) = 0 [pid 7516] close(4) = 0 [pid 7516] close(5) = 0 [pid 7516] close(6) = -1 EBADF (Bad file descriptor) [pid 7516] close(7) = -1 EBADF (Bad file descriptor) [pid 7516] close(8) = -1 EBADF (Bad file descriptor) [pid 7516] close(9) = -1 EBADF (Bad file descriptor) [pid 7516] close(10) = -1 EBADF (Bad file descriptor) [pid 7516] close(11) = -1 EBADF (Bad file descriptor) [pid 7516] close(12) = -1 EBADF (Bad file descriptor) [pid 7516] close(13) = -1 EBADF (Bad file descriptor) [pid 7516] close(14) = -1 EBADF (Bad file descriptor) [pid 7516] close(15) = -1 EBADF (Bad file descriptor) [pid 7516] close(16) = -1 EBADF (Bad file descriptor) [pid 7516] close(17) = -1 EBADF (Bad file descriptor) [pid 7516] close(18) = -1 EBADF (Bad file descriptor) [pid 7516] close(19) = -1 EBADF (Bad file descriptor) [pid 7516] close(20) = -1 EBADF (Bad file descriptor) [pid 7516] close(21) = -1 EBADF (Bad file descriptor) [pid 7516] close(22) = -1 EBADF (Bad file descriptor) [pid 7516] close(23) = -1 EBADF (Bad file descriptor) [pid 7516] close(24) = -1 EBADF (Bad file descriptor) [pid 7516] close(25) = -1 EBADF (Bad file descriptor) [pid 7516] close(26) = -1 EBADF (Bad file descriptor) [pid 7516] close(27) = -1 EBADF (Bad file descriptor) [pid 7516] close(28) = -1 EBADF (Bad file descriptor) [pid 7516] close(29) = -1 EBADF (Bad file descriptor) [pid 7516] exit_group(0 [pid 7517] <... futex resumed>) = ? [pid 7516] <... exit_group resumed>) = ? [pid 7518] <... futex resumed>) = ? [pid 7517] +++ exited with 0 +++ [pid 7518] +++ exited with 0 +++ [pid 7516] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2474, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./831", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./831", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./831/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./831/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./831/cgroup.cpu") = 0 [pid 5028] umount2("./831/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./831/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./831/binderfs") = 0 [pid 5028] umount2("./831/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./831/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./831/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./831/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./831/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./831/file0") = 0 [pid 5028] umount2("./831/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./831/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./831/cgroup") = 0 [pid 5028] umount2("./831/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./831/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./831/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./831") = 0 [pid 5028] mkdir("./832", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7519 attached , child_tidptr=0x5555563a5690) = 2477 [pid 7519] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7519] chdir("./832") = 0 [pid 7519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7519] setpgid(0, 0) = 0 [pid 7519] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7519] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7519] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7519] write(3, "1000", 4) = 4 [pid 7519] close(3) = 0 [pid 7519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7519] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7519] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7519] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7519] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7520 attached => {parent_tid=[2478]}, 88) = 2478 [pid 7520] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7519] rt_sigprocmask(SIG_SETMASK, [], [pid 7520] <... rseq resumed>) = 0 [pid 7519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7520] set_robust_list(0x7feeffcce9a0, 24 [pid 7519] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7519] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7520] <... set_robust_list resumed>) = 0 [pid 7520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7520] memfd_create("syzkaller", 0) = 3 [pid 7520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7520] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7520] munmap(0x7feef78ae000, 2097152) = 0 [pid 7520] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7520] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7520] close(3) = 0 [pid 7520] mkdir("./file0", 0777) = 0 [ 257.231572][ T7520] loop0: detected capacity change from 0 to 4096 [ 257.240740][ T7520] __ntfs_warning: 12 callbacks suppressed [ 257.240755][ T7520] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7520] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7520] chdir("./file0") = 0 [pid 7520] ioctl(4, LOOP_CLR_FD) = 0 [pid 7520] close(4) = 0 [pid 7520] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7519] <... futex resumed>) = 0 [pid 7520] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7519] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7520] <... futex resumed>) = 0 [pid 7519] <... futex resumed>) = 1 [pid 7520] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7519] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7520] <... openat resumed>) = 4 [pid 7520] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7519] <... futex resumed>) = 0 [pid 7519] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7520] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7519] <... futex resumed>) = 0 [pid 7520] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7519] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7520] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7519] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7519] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7520] <... futex resumed>) = 0 [ 257.278482][ T7520] ntfs: volume version 3.1. [pid 7520] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7519] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7519] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7521 attached => {parent_tid=[2479]}, 88) = 2479 [pid 7521] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7519] rt_sigprocmask(SIG_SETMASK, [], [pid 7521] <... rseq resumed>) = 0 [pid 7519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7521] set_robust_list(0x7feef7aad9a0, 24 [pid 7519] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7521] <... set_robust_list resumed>) = 0 [pid 7521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7521] ftruncate(4, 0 [pid 7519] <... futex resumed>) = 0 [pid 7519] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7521] <... ftruncate resumed>) = 0 [pid 7520] <... write resumed>) = 1048064 [pid 7521] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7520] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7520] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7519] <... futex resumed>) = 0 [pid 7521] <... futex resumed>) = 1 [pid 7521] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7519] close(3) = 0 [pid 7519] close(4) = 0 [pid 7519] close(5) = 0 [pid 7519] close(6) = -1 EBADF (Bad file descriptor) [pid 7519] close(7) = -1 EBADF (Bad file descriptor) [pid 7519] close(8) = -1 EBADF (Bad file descriptor) [pid 7519] close(9) = -1 EBADF (Bad file descriptor) [pid 7519] close(10) = -1 EBADF (Bad file descriptor) [pid 7519] close(11) = -1 EBADF (Bad file descriptor) [pid 7519] close(12) = -1 EBADF (Bad file descriptor) [pid 7519] close(13) = -1 EBADF (Bad file descriptor) [pid 7519] close(14) = -1 EBADF (Bad file descriptor) [pid 7519] close(15) = -1 EBADF (Bad file descriptor) [pid 7519] close(16) = -1 EBADF (Bad file descriptor) [pid 7519] close(17) = -1 EBADF (Bad file descriptor) [pid 7519] close(18) = -1 EBADF (Bad file descriptor) [pid 7519] close(19) = -1 EBADF (Bad file descriptor) [pid 7519] close(20) = -1 EBADF (Bad file descriptor) [pid 7519] close(21) = -1 EBADF (Bad file descriptor) [pid 7519] close(22) = -1 EBADF (Bad file descriptor) [pid 7519] close(23) = -1 EBADF (Bad file descriptor) [pid 7519] close(24) = -1 EBADF (Bad file descriptor) [pid 7519] close(25) = -1 EBADF (Bad file descriptor) [pid 7519] close(26) = -1 EBADF (Bad file descriptor) [pid 7519] close(27) = -1 EBADF (Bad file descriptor) [pid 7519] close(28) = -1 EBADF (Bad file descriptor) [pid 7519] close(29) = -1 EBADF (Bad file descriptor) [pid 7519] exit_group(0 [pid 7520] <... futex resumed>) = ? [pid 7519] <... exit_group resumed>) = ? [pid 7521] <... futex resumed>) = ? [pid 7520] +++ exited with 0 +++ [pid 7521] +++ exited with 0 +++ [pid 7519] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2477, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./832", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./832", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./832/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./832/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./832/cgroup.cpu") = 0 [pid 5028] umount2("./832/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./832/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./832/binderfs") = 0 [pid 5028] umount2("./832/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./832/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./832/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./832/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./832/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./832/file0") = 0 [pid 5028] umount2("./832/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./832/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./832/cgroup") = 0 [pid 5028] umount2("./832/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./832/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./832/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./832") = 0 [pid 5028] mkdir("./833", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7522 attached , child_tidptr=0x5555563a5690) = 2480 [pid 7522] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7522] chdir("./833") = 0 [pid 7522] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7522] setpgid(0, 0) = 0 [pid 7522] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7522] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7522] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7522] write(3, "1000", 4) = 4 [pid 7522] close(3) = 0 [pid 7522] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7522] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7522] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7522] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2481]}, 88) = 2481 [pid 7522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7522] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7522] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7523 attached [pid 7523] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7523] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7523] memfd_create("syzkaller", 0) = 3 [pid 7523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7523] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7523] munmap(0x7feef78ae000, 2097152) = 0 [pid 7523] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7523] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7523] close(3) = 0 [pid 7523] mkdir("./file0", 0777) = 0 [pid 7523] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7523] chdir("./file0") = 0 [pid 7523] ioctl(4, LOOP_CLR_FD) = 0 [pid 7523] close(4) = 0 [pid 7523] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7522] <... futex resumed>) = 0 [pid 7523] <... futex resumed>) = 1 [pid 7522] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7522] <... futex resumed>) = 0 [pid 7523] <... openat resumed>) = 4 [pid 7522] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7523] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7523] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7522] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7523] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7523] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7522] <... futex resumed>) = 0 [pid 7523] <... futex resumed>) = 0 [pid 7522] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7523] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7522] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] <... futex resumed>) = 0 [pid 7522] <... futex resumed>) = 1 [pid 7523] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 257.501554][ T7523] loop0: detected capacity change from 0 to 4096 [ 257.510612][ T7523] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 257.543876][ T7523] ntfs: volume version 3.1. [pid 7522] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7522] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7522] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7524 attached => {parent_tid=[2482]}, 88) = 2482 [pid 7524] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7522] rt_sigprocmask(SIG_SETMASK, [], [pid 7524] <... rseq resumed>) = 0 [pid 7524] set_robust_list(0x7feef7aad9a0, 24 [pid 7522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7524] <... set_robust_list resumed>) = 0 [pid 7522] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7522] <... futex resumed>) = 0 [pid 7522] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7524] ftruncate(4, 0) = 0 [pid 7523] <... write resumed>) = 1048064 [pid 7524] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7523] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7524] <... futex resumed>) = 1 [pid 7524] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7523] <... futex resumed>) = 0 [pid 7523] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7522] <... futex resumed>) = 0 [pid 7522] close(3) = 0 [pid 7522] close(4) = 0 [pid 7522] close(5) = 0 [pid 7522] close(6) = -1 EBADF (Bad file descriptor) [pid 7522] close(7) = -1 EBADF (Bad file descriptor) [pid 7522] close(8) = -1 EBADF (Bad file descriptor) [pid 7522] close(9) = -1 EBADF (Bad file descriptor) [pid 7522] close(10) = -1 EBADF (Bad file descriptor) [pid 7522] close(11) = -1 EBADF (Bad file descriptor) [pid 7522] close(12) = -1 EBADF (Bad file descriptor) [pid 7522] close(13) = -1 EBADF (Bad file descriptor) [pid 7522] close(14) = -1 EBADF (Bad file descriptor) [pid 7522] close(15) = -1 EBADF (Bad file descriptor) [pid 7522] close(16) = -1 EBADF (Bad file descriptor) [pid 7522] close(17) = -1 EBADF (Bad file descriptor) [pid 7522] close(18) = -1 EBADF (Bad file descriptor) [pid 7522] close(19) = -1 EBADF (Bad file descriptor) [pid 7522] close(20) = -1 EBADF (Bad file descriptor) [pid 7522] close(21) = -1 EBADF (Bad file descriptor) [pid 7522] close(22) = -1 EBADF (Bad file descriptor) [pid 7522] close(23) = -1 EBADF (Bad file descriptor) [pid 7522] close(24) = -1 EBADF (Bad file descriptor) [pid 7522] close(25) = -1 EBADF (Bad file descriptor) [pid 7522] close(26) = -1 EBADF (Bad file descriptor) [pid 7522] close(27) = -1 EBADF (Bad file descriptor) [pid 7522] close(28) = -1 EBADF (Bad file descriptor) [pid 7522] close(29) = -1 EBADF (Bad file descriptor) [pid 7522] exit_group(0) = ? [pid 7524] <... futex resumed>) = ? [pid 7523] <... futex resumed>) = ? [pid 7524] +++ exited with 0 +++ [pid 7523] +++ exited with 0 +++ [pid 7522] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2480, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./833", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./833", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./833/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./833/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./833/cgroup.cpu") = 0 [pid 5028] umount2("./833/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./833/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./833/binderfs") = 0 [pid 5028] umount2("./833/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./833/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./833/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./833/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./833/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./833/file0") = 0 [pid 5028] umount2("./833/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./833/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./833/cgroup") = 0 [pid 5028] umount2("./833/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./833/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./833/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./833") = 0 [pid 5028] mkdir("./834", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7525 attached [pid 7525] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2483 [pid 7525] <... set_robust_list resumed>) = 0 [pid 7525] chdir("./834") = 0 [pid 7525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7525] setpgid(0, 0) = 0 [pid 7525] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7525] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7525] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7525] write(3, "1000", 4) = 4 [pid 7525] close(3) = 0 [pid 7525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7525] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7525] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7525] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7525] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7526 attached => {parent_tid=[2484]}, 88) = 2484 [pid 7526] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7525] rt_sigprocmask(SIG_SETMASK, [], [pid 7526] <... rseq resumed>) = 0 [pid 7526] set_robust_list(0x7feeffcce9a0, 24 [pid 7525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7526] <... set_robust_list resumed>) = 0 [pid 7526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7525] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7526] memfd_create("syzkaller", 0 [pid 7525] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7526] <... memfd_create resumed>) = 3 [pid 7526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7526] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7526] munmap(0x7feef78ae000, 2097152) = 0 [pid 7526] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7526] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7526] close(3) = 0 [pid 7526] mkdir("./file0", 0777) = 0 [pid 7526] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7526] chdir("./file0") = 0 [pid 7526] ioctl(4, LOOP_CLR_FD) = 0 [pid 7526] close(4) = 0 [pid 7526] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7525] <... futex resumed>) = 0 [pid 7526] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7525] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7525] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7526] <... openat resumed>) = 4 [pid 7526] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7525] <... futex resumed>) = 0 [pid 7526] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7525] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7526] <... openat resumed>) = 5 [pid 7526] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7526] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7525] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7525] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7526] <... futex resumed>) = 0 [pid 7525] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 257.752268][ T7526] loop0: detected capacity change from 0 to 4096 [ 257.761501][ T7526] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 257.792175][ T7526] ntfs: volume version 3.1. [pid 7526] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7525] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7525] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7525] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7527 attached [pid 7527] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7525] <... clone3 resumed> => {parent_tid=[2485]}, 88) = 2485 [pid 7527] set_robust_list(0x7feef7aad9a0, 24 [pid 7525] rt_sigprocmask(SIG_SETMASK, [], [pid 7527] <... set_robust_list resumed>) = 0 [pid 7525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7527] rt_sigprocmask(SIG_SETMASK, [], [pid 7525] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7527] ftruncate(4, 0 [pid 7525] <... futex resumed>) = 0 [pid 7525] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7527] <... ftruncate resumed>) = 0 [pid 7527] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7526] <... write resumed>) = 1048064 [pid 7525] <... futex resumed>) = 0 [pid 7527] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7526] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7526] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7525] close(3) = 0 [pid 7525] close(4) = 0 [pid 7525] close(5) = 0 [pid 7525] close(6) = -1 EBADF (Bad file descriptor) [pid 7525] close(7) = -1 EBADF (Bad file descriptor) [pid 7525] close(8) = -1 EBADF (Bad file descriptor) [pid 7525] close(9) = -1 EBADF (Bad file descriptor) [pid 7525] close(10) = -1 EBADF (Bad file descriptor) [pid 7525] close(11) = -1 EBADF (Bad file descriptor) [pid 7525] close(12) = -1 EBADF (Bad file descriptor) [pid 7525] close(13) = -1 EBADF (Bad file descriptor) [pid 7525] close(14) = -1 EBADF (Bad file descriptor) [pid 7525] close(15) = -1 EBADF (Bad file descriptor) [pid 7525] close(16) = -1 EBADF (Bad file descriptor) [pid 7525] close(17) = -1 EBADF (Bad file descriptor) [pid 7525] close(18) = -1 EBADF (Bad file descriptor) [pid 7525] close(19) = -1 EBADF (Bad file descriptor) [pid 7525] close(20) = -1 EBADF (Bad file descriptor) [pid 7525] close(21) = -1 EBADF (Bad file descriptor) [pid 7525] close(22) = -1 EBADF (Bad file descriptor) [pid 7525] close(23) = -1 EBADF (Bad file descriptor) [pid 7525] close(24) = -1 EBADF (Bad file descriptor) [pid 7525] close(25) = -1 EBADF (Bad file descriptor) [pid 7525] close(26) = -1 EBADF (Bad file descriptor) [pid 7525] close(27) = -1 EBADF (Bad file descriptor) [pid 7525] close(28) = -1 EBADF (Bad file descriptor) [pid 7525] close(29) = -1 EBADF (Bad file descriptor) [pid 7525] exit_group(0) = ? [pid 7527] <... futex resumed>) = ? [pid 7527] +++ exited with 0 +++ [pid 7526] <... futex resumed>) = ? [pid 7526] +++ exited with 0 +++ [pid 7525] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2483, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./834", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./834", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./834/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./834/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./834/cgroup.cpu") = 0 [pid 5028] umount2("./834/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./834/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./834/binderfs") = 0 [pid 5028] umount2("./834/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./834/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./834/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./834/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./834/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./834/file0") = 0 [pid 5028] umount2("./834/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./834/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./834/cgroup") = 0 [pid 5028] umount2("./834/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./834/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./834/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./834") = 0 [pid 5028] mkdir("./835", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2486 ./strace-static-x86_64: Process 7528 attached [pid 7528] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7528] chdir("./835") = 0 [pid 7528] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7528] setpgid(0, 0) = 0 [pid 7528] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7528] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7528] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7528] write(3, "1000", 4) = 4 [pid 7528] close(3) = 0 [pid 7528] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7528] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7528] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7528] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7529 attached => {parent_tid=[2487]}, 88) = 2487 [pid 7528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7529] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7528] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7529] <... rseq resumed>) = 0 [pid 7528] <... futex resumed>) = 0 [pid 7529] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7528] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7529] memfd_create("syzkaller", 0) = 3 [pid 7529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7529] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7529] munmap(0x7feef78ae000, 2097152) = 0 [pid 7529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7529] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7529] close(3) = 0 [pid 7529] mkdir("./file0", 0777) = 0 [pid 7529] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7529] chdir("./file0") = 0 [pid 7529] ioctl(4, LOOP_CLR_FD) = 0 [pid 7529] close(4) = 0 [pid 7529] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7528] <... futex resumed>) = 0 [pid 7529] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7528] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7528] <... futex resumed>) = 0 [pid 7529] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7528] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7529] <... openat resumed>) = 4 [pid 7529] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7528] <... futex resumed>) = 0 [pid 7529] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7528] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7528] <... futex resumed>) = 0 [pid 7529] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7528] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7529] <... openat resumed>) = 5 [pid 7529] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7528] <... futex resumed>) = 0 [pid 7529] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7528] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7528] <... futex resumed>) = 0 [pid 7529] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 257.995142][ T7529] loop0: detected capacity change from 0 to 4096 [ 258.004123][ T7529] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 258.037689][ T7529] ntfs: volume version 3.1. [pid 7528] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7528] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7528] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7530 attached => {parent_tid=[2488]}, 88) = 2488 [pid 7528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7528] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7530] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7528] <... futex resumed>) = 0 [pid 7530] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7528] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7530] ftruncate(4, 0) = 0 [pid 7529] <... write resumed>) = 1048064 [pid 7530] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7529] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7530] <... futex resumed>) = 1 [pid 7529] <... futex resumed>) = 0 [pid 7530] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7529] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7528] <... futex resumed>) = 0 [pid 7528] close(3) = 0 [pid 7528] close(4) = 0 [pid 7528] close(5) = 0 [pid 7528] close(6) = -1 EBADF (Bad file descriptor) [pid 7528] close(7) = -1 EBADF (Bad file descriptor) [pid 7528] close(8) = -1 EBADF (Bad file descriptor) [pid 7528] close(9) = -1 EBADF (Bad file descriptor) [pid 7528] close(10) = -1 EBADF (Bad file descriptor) [pid 7528] close(11) = -1 EBADF (Bad file descriptor) [pid 7528] close(12) = -1 EBADF (Bad file descriptor) [pid 7528] close(13) = -1 EBADF (Bad file descriptor) [pid 7528] close(14) = -1 EBADF (Bad file descriptor) [pid 7528] close(15) = -1 EBADF (Bad file descriptor) [pid 7528] close(16) = -1 EBADF (Bad file descriptor) [pid 7528] close(17) = -1 EBADF (Bad file descriptor) [pid 7528] close(18) = -1 EBADF (Bad file descriptor) [pid 7528] close(19) = -1 EBADF (Bad file descriptor) [pid 7528] close(20) = -1 EBADF (Bad file descriptor) [pid 7528] close(21) = -1 EBADF (Bad file descriptor) [pid 7528] close(22) = -1 EBADF (Bad file descriptor) [pid 7528] close(23) = -1 EBADF (Bad file descriptor) [pid 7528] close(24) = -1 EBADF (Bad file descriptor) [pid 7528] close(25) = -1 EBADF (Bad file descriptor) [pid 7528] close(26) = -1 EBADF (Bad file descriptor) [pid 7528] close(27) = -1 EBADF (Bad file descriptor) [pid 7528] close(28) = -1 EBADF (Bad file descriptor) [pid 7528] close(29) = -1 EBADF (Bad file descriptor) [pid 7528] exit_group(0) = ? [pid 7529] <... futex resumed>) = ? [pid 7530] <... futex resumed>) = ? [pid 7529] +++ exited with 0 +++ [pid 7530] +++ exited with 0 +++ [pid 7528] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2486, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./835", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./835", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./835/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./835/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./835/cgroup.cpu") = 0 [pid 5028] umount2("./835/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./835/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./835/binderfs") = 0 [pid 5028] umount2("./835/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./835/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./835/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./835/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./835/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./835/file0") = 0 [pid 5028] umount2("./835/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./835/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./835/cgroup") = 0 [pid 5028] umount2("./835/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./835/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./835/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./835") = 0 [pid 5028] mkdir("./836", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7531 attached , child_tidptr=0x5555563a5690) = 2489 [pid 7531] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7531] chdir("./836") = 0 [pid 7531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7531] setpgid(0, 0) = 0 [pid 7531] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7531] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7531] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7531] write(3, "1000", 4) = 4 [pid 7531] close(3) = 0 [pid 7531] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7531] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7531] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7531] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7531] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7531] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7531] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7531] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7532 attached [pid 7532] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7531] <... clone3 resumed> => {parent_tid=[2490]}, 88) = 2490 [pid 7532] <... rseq resumed>) = 0 [pid 7531] rt_sigprocmask(SIG_SETMASK, [], [pid 7532] set_robust_list(0x7feeffcce9a0, 24 [pid 7531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7532] <... set_robust_list resumed>) = 0 [pid 7531] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7531] <... futex resumed>) = 0 [pid 7532] memfd_create("syzkaller", 0 [pid 7531] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7532] <... memfd_create resumed>) = 3 [pid 7532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7532] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7532] munmap(0x7feef78ae000, 2097152) = 0 [pid 7532] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7532] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7532] close(3) = 0 [pid 7532] mkdir("./file0", 0777) = 0 [pid 7532] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7532] chdir("./file0") = 0 [pid 7532] ioctl(4, LOOP_CLR_FD) = 0 [pid 7532] close(4) = 0 [pid 7532] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7531] <... futex resumed>) = 0 [pid 7532] <... futex resumed>) = 1 [pid 7531] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7532] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7531] <... futex resumed>) = 0 [pid 7531] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7532] <... openat resumed>) = 4 [pid 7532] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7531] <... futex resumed>) = 0 [pid 7531] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7532] <... futex resumed>) = 1 [pid 7531] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7532] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7532] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7531] <... futex resumed>) = 0 [pid 7531] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7532] <... futex resumed>) = 1 [pid 7531] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 258.252601][ T7532] loop0: detected capacity change from 0 to 4096 [ 258.261910][ T7532] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 258.294692][ T7532] ntfs: volume version 3.1. [pid 7532] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7531] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7531] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7531] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7531] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7531] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7531] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7533 attached [pid 7533] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7531] <... clone3 resumed> => {parent_tid=[2491]}, 88) = 2491 [pid 7533] <... rseq resumed>) = 0 [pid 7531] rt_sigprocmask(SIG_SETMASK, [], [pid 7533] set_robust_list(0x7feef7aad9a0, 24 [pid 7531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7533] <... set_robust_list resumed>) = 0 [pid 7533] rt_sigprocmask(SIG_SETMASK, [], [pid 7531] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7533] ftruncate(4, 0 [pid 7531] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7533] <... ftruncate resumed>) = 0 [pid 7533] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7531] <... futex resumed>) = 0 [pid 7533] <... futex resumed>) = 1 [pid 7533] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7532] <... write resumed>) = 1048064 [pid 7532] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7532] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7531] close(3) = 0 [pid 7531] close(4) = 0 [pid 7531] close(5) = 0 [pid 7531] close(6) = -1 EBADF (Bad file descriptor) [pid 7531] close(7) = -1 EBADF (Bad file descriptor) [pid 7531] close(8) = -1 EBADF (Bad file descriptor) [pid 7531] close(9) = -1 EBADF (Bad file descriptor) [pid 7531] close(10) = -1 EBADF (Bad file descriptor) [pid 7531] close(11) = -1 EBADF (Bad file descriptor) [pid 7531] close(12) = -1 EBADF (Bad file descriptor) [pid 7531] close(13) = -1 EBADF (Bad file descriptor) [pid 7531] close(14) = -1 EBADF (Bad file descriptor) [pid 7531] close(15) = -1 EBADF (Bad file descriptor) [pid 7531] close(16) = -1 EBADF (Bad file descriptor) [pid 7531] close(17) = -1 EBADF (Bad file descriptor) [pid 7531] close(18) = -1 EBADF (Bad file descriptor) [pid 7531] close(19) = -1 EBADF (Bad file descriptor) [pid 7531] close(20) = -1 EBADF (Bad file descriptor) [pid 7531] close(21) = -1 EBADF (Bad file descriptor) [pid 7531] close(22) = -1 EBADF (Bad file descriptor) [pid 7531] close(23) = -1 EBADF (Bad file descriptor) [pid 7531] close(24) = -1 EBADF (Bad file descriptor) [pid 7531] close(25) = -1 EBADF (Bad file descriptor) [pid 7531] close(26) = -1 EBADF (Bad file descriptor) [pid 7531] close(27) = -1 EBADF (Bad file descriptor) [pid 7531] close(28) = -1 EBADF (Bad file descriptor) [pid 7531] close(29) = -1 EBADF (Bad file descriptor) [pid 7531] exit_group(0) = ? [pid 7532] <... futex resumed>) = ? [pid 7533] <... futex resumed>) = ? [pid 7532] +++ exited with 0 +++ [pid 7533] +++ exited with 0 +++ [pid 7531] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2489, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./836", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./836", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./836/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./836/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./836/cgroup.cpu") = 0 [pid 5028] umount2("./836/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./836/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./836/binderfs") = 0 [pid 5028] umount2("./836/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./836/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./836/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./836/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./836/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./836/file0") = 0 [pid 5028] umount2("./836/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./836/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./836/cgroup") = 0 [pid 5028] umount2("./836/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./836/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./836/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./836") = 0 [pid 5028] mkdir("./837", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7534 attached , child_tidptr=0x5555563a5690) = 2492 [pid 7534] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7534] chdir("./837") = 0 [pid 7534] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7534] setpgid(0, 0) = 0 [pid 7534] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7534] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7534] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7534] write(3, "1000", 4) = 4 [pid 7534] close(3) = 0 [pid 7534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7534] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7534] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7534] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7534] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7534] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7535 attached => {parent_tid=[2493]}, 88) = 2493 [pid 7535] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7534] rt_sigprocmask(SIG_SETMASK, [], [pid 7535] <... rseq resumed>) = 0 [pid 7534] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7535] set_robust_list(0x7feeffcce9a0, 24 [pid 7534] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... set_robust_list resumed>) = 0 [pid 7534] <... futex resumed>) = 0 [pid 7535] rt_sigprocmask(SIG_SETMASK, [], [pid 7534] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7535] memfd_create("syzkaller", 0) = 3 [pid 7535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7535] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7535] munmap(0x7feef78ae000, 2097152) = 0 [pid 7535] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7535] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7535] close(3) = 0 [pid 7535] mkdir("./file0", 0777) = 0 [pid 7535] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7535] chdir("./file0") = 0 [pid 7535] ioctl(4, LOOP_CLR_FD) = 0 [pid 7535] close(4) = 0 [pid 7535] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7535] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7534] <... futex resumed>) = 0 [pid 7534] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7535] <... futex resumed>) = 0 [pid 7535] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7534] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7535] <... openat resumed>) = 4 [pid 7535] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7535] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7534] <... futex resumed>) = 0 [pid 7534] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... futex resumed>) = 0 [pid 7534] <... futex resumed>) = 1 [pid 7535] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7534] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7535] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7535] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7534] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7534] <... futex resumed>) = 0 [pid 7535] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 258.504095][ T7535] loop0: detected capacity change from 0 to 4096 [ 258.513210][ T7535] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 258.546107][ T7535] ntfs: volume version 3.1. [pid 7534] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7534] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7534] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7534] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7536 attached => {parent_tid=[2494]}, 88) = 2494 [pid 7536] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7536] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7536] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7534] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7536] <... futex resumed>) = 0 [pid 7536] ftruncate(4, 0 [pid 7534] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7536] <... ftruncate resumed>) = 0 [pid 7535] <... write resumed>) = 1048064 [pid 7535] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7535] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7536] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7536] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7534] <... futex resumed>) = 0 [pid 7534] close(3) = 0 [pid 7534] close(4) = 0 [pid 7534] close(5) = 0 [pid 7534] close(6) = -1 EBADF (Bad file descriptor) [pid 7534] close(7) = -1 EBADF (Bad file descriptor) [pid 7534] close(8) = -1 EBADF (Bad file descriptor) [pid 7534] close(9) = -1 EBADF (Bad file descriptor) [pid 7534] close(10) = -1 EBADF (Bad file descriptor) [pid 7534] close(11) = -1 EBADF (Bad file descriptor) [pid 7534] close(12) = -1 EBADF (Bad file descriptor) [pid 7534] close(13) = -1 EBADF (Bad file descriptor) [pid 7534] close(14) = -1 EBADF (Bad file descriptor) [pid 7534] close(15) = -1 EBADF (Bad file descriptor) [pid 7534] close(16) = -1 EBADF (Bad file descriptor) [pid 7534] close(17) = -1 EBADF (Bad file descriptor) [pid 7534] close(18) = -1 EBADF (Bad file descriptor) [pid 7534] close(19) = -1 EBADF (Bad file descriptor) [pid 7534] close(20) = -1 EBADF (Bad file descriptor) [pid 7534] close(21) = -1 EBADF (Bad file descriptor) [pid 7534] close(22) = -1 EBADF (Bad file descriptor) [pid 7534] close(23) = -1 EBADF (Bad file descriptor) [pid 7534] close(24) = -1 EBADF (Bad file descriptor) [pid 7534] close(25) = -1 EBADF (Bad file descriptor) [pid 7534] close(26) = -1 EBADF (Bad file descriptor) [pid 7534] close(27) = -1 EBADF (Bad file descriptor) [pid 7534] close(28) = -1 EBADF (Bad file descriptor) [pid 7534] close(29) = -1 EBADF (Bad file descriptor) [pid 7534] exit_group(0) = ? [pid 7535] <... futex resumed>) = ? [pid 7535] +++ exited with 0 +++ [pid 7536] <... futex resumed>) = ? [pid 7536] +++ exited with 0 +++ [pid 7534] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2492, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./837", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./837", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./837/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./837/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./837/cgroup.cpu") = 0 [pid 5028] umount2("./837/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./837/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./837/binderfs") = 0 [pid 5028] umount2("./837/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./837/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./837/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./837/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./837/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./837/file0") = 0 [pid 5028] umount2("./837/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./837/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./837/cgroup") = 0 [pid 5028] umount2("./837/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./837/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./837/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./837") = 0 [pid 5028] mkdir("./838", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2495 ./strace-static-x86_64: Process 7537 attached [pid 7537] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7537] chdir("./838") = 0 [pid 7537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7537] setpgid(0, 0) = 0 [pid 7537] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7537] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7537] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7537] write(3, "1000", 4) = 4 [pid 7537] close(3) = 0 [pid 7537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7537] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7537] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7537] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7537] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7537] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7538 attached => {parent_tid=[2496]}, 88) = 2496 [pid 7537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7537] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7537] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7538] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7538] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7538] memfd_create("syzkaller", 0) = 3 [pid 7538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7538] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7538] munmap(0x7feef78ae000, 2097152) = 0 [pid 7538] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7538] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7538] close(3) = 0 [pid 7538] mkdir("./file0", 0777) = 0 [pid 7538] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7538] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7538] chdir("./file0") = 0 [pid 7538] ioctl(4, LOOP_CLR_FD) = 0 [pid 7538] close(4) = 0 [pid 7538] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7538] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7537] <... futex resumed>) = 0 [pid 7537] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7537] <... futex resumed>) = 0 [pid 7538] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7537] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7538] <... openat resumed>) = 4 [pid 7538] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7538] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7537] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7537] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7538] <... futex resumed>) = 0 [pid 7538] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7537] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7538] <... openat resumed>) = 5 [pid 7538] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7537] <... futex resumed>) = 0 [pid 7538] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7537] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 258.768241][ T7538] loop0: detected capacity change from 0 to 4096 [ 258.777102][ T7538] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 258.810226][ T7538] ntfs: volume version 3.1. [pid 7537] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7537] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7537] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7537] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7539 attached => {parent_tid=[2497]}, 88) = 2497 [pid 7539] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7537] rt_sigprocmask(SIG_SETMASK, [], [pid 7539] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7539] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7537] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7537] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7539] ftruncate(4, 0) = 0 [pid 7539] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7538] <... write resumed>) = 1048064 [pid 7539] <... futex resumed>) = 1 [pid 7538] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7537] <... futex resumed>) = 0 [pid 7539] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7538] <... futex resumed>) = 0 [pid 7537] close(3 [pid 7538] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7537] <... close resumed>) = 0 [pid 7537] close(4) = 0 [pid 7537] close(5) = 0 [pid 7537] close(6) = -1 EBADF (Bad file descriptor) [pid 7537] close(7) = -1 EBADF (Bad file descriptor) [pid 7537] close(8) = -1 EBADF (Bad file descriptor) [pid 7537] close(9) = -1 EBADF (Bad file descriptor) [pid 7537] close(10) = -1 EBADF (Bad file descriptor) [pid 7537] close(11) = -1 EBADF (Bad file descriptor) [pid 7537] close(12) = -1 EBADF (Bad file descriptor) [pid 7537] close(13) = -1 EBADF (Bad file descriptor) [pid 7537] close(14) = -1 EBADF (Bad file descriptor) [pid 7537] close(15) = -1 EBADF (Bad file descriptor) [pid 7537] close(16) = -1 EBADF (Bad file descriptor) [pid 7537] close(17) = -1 EBADF (Bad file descriptor) [pid 7537] close(18) = -1 EBADF (Bad file descriptor) [pid 7537] close(19) = -1 EBADF (Bad file descriptor) [pid 7537] close(20) = -1 EBADF (Bad file descriptor) [pid 7537] close(21) = -1 EBADF (Bad file descriptor) [pid 7537] close(22) = -1 EBADF (Bad file descriptor) [pid 7537] close(23) = -1 EBADF (Bad file descriptor) [pid 7537] close(24) = -1 EBADF (Bad file descriptor) [pid 7537] close(25) = -1 EBADF (Bad file descriptor) [pid 7537] close(26) = -1 EBADF (Bad file descriptor) [pid 7537] close(27) = -1 EBADF (Bad file descriptor) [pid 7537] close(28) = -1 EBADF (Bad file descriptor) [pid 7537] close(29) = -1 EBADF (Bad file descriptor) [pid 7537] exit_group(0 [pid 7539] <... futex resumed>) = ? [pid 7538] <... futex resumed>) = ? [pid 7537] <... exit_group resumed>) = ? [pid 7539] +++ exited with 0 +++ [pid 7538] +++ exited with 0 +++ [pid 7537] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2495, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./838", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./838", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./838/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./838/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./838/cgroup.cpu") = 0 [pid 5028] umount2("./838/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./838/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./838/binderfs") = 0 [pid 5028] umount2("./838/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./838/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./838/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./838/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./838/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./838/file0") = 0 [pid 5028] umount2("./838/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./838/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./838/cgroup") = 0 [pid 5028] umount2("./838/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./838/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./838/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./838") = 0 [pid 5028] mkdir("./839", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7540 attached , child_tidptr=0x5555563a5690) = 2498 [pid 7540] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7540] chdir("./839") = 0 [pid 7540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7540] setpgid(0, 0) = 0 [pid 7540] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7540] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7540] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7540] write(3, "1000", 4) = 4 [pid 7540] close(3) = 0 [pid 7540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7540] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7540] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7540] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2499]}, 88) = 2499 [pid 7540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7540] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7540] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7541 attached [pid 7541] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7541] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7541] memfd_create("syzkaller", 0) = 3 [pid 7541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7541] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7541] munmap(0x7feef78ae000, 2097152) = 0 [pid 7541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7541] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7541] close(3) = 0 [pid 7541] mkdir("./file0", 0777) = 0 [pid 7541] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7541] chdir("./file0") = 0 [pid 7541] ioctl(4, LOOP_CLR_FD) = 0 [pid 7541] close(4) = 0 [pid 7541] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7541] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7540] <... futex resumed>) = 0 [pid 7540] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7541] <... futex resumed>) = 0 [pid 7541] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7540] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7541] <... openat resumed>) = 4 [pid 7541] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7540] <... futex resumed>) = 0 [pid 7541] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7540] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7540] <... futex resumed>) = 0 [pid 7541] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7540] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7541] <... openat resumed>) = 5 [pid 7541] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7540] <... futex resumed>) = 0 [pid 7540] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7541] <... futex resumed>) = 1 [pid 7540] <... futex resumed>) = 0 [pid 7540] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 259.021311][ T7541] loop0: detected capacity change from 0 to 4096 [ 259.031358][ T7541] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 259.063455][ T7541] ntfs: volume version 3.1. [pid 7541] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7540] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7540] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7540] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7542 attached [pid 7542] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7540] <... clone3 resumed> => {parent_tid=[2500]}, 88) = 2500 [pid 7542] set_robust_list(0x7feef7aad9a0, 24 [pid 7540] rt_sigprocmask(SIG_SETMASK, [], [pid 7542] <... set_robust_list resumed>) = 0 [pid 7540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7542] rt_sigprocmask(SIG_SETMASK, [], [pid 7540] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7542] ftruncate(4, 0 [pid 7540] <... futex resumed>) = 0 [pid 7540] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7542] <... ftruncate resumed>) = 0 [pid 7542] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7541] <... write resumed>) = 1048064 [pid 7540] <... futex resumed>) = 0 [pid 7542] <... futex resumed>) = 1 [pid 7541] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7542] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7541] <... futex resumed>) = 0 [pid 7541] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7540] close(3) = 0 [pid 7540] close(4) = 0 [pid 7540] close(5) = 0 [pid 7540] close(6) = -1 EBADF (Bad file descriptor) [pid 7540] close(7) = -1 EBADF (Bad file descriptor) [pid 7540] close(8) = -1 EBADF (Bad file descriptor) [pid 7540] close(9) = -1 EBADF (Bad file descriptor) [pid 7540] close(10) = -1 EBADF (Bad file descriptor) [pid 7540] close(11) = -1 EBADF (Bad file descriptor) [pid 7540] close(12) = -1 EBADF (Bad file descriptor) [pid 7540] close(13) = -1 EBADF (Bad file descriptor) [pid 7540] close(14) = -1 EBADF (Bad file descriptor) [pid 7540] close(15) = -1 EBADF (Bad file descriptor) [pid 7540] close(16) = -1 EBADF (Bad file descriptor) [pid 7540] close(17) = -1 EBADF (Bad file descriptor) [pid 7540] close(18) = -1 EBADF (Bad file descriptor) [pid 7540] close(19) = -1 EBADF (Bad file descriptor) [pid 7540] close(20) = -1 EBADF (Bad file descriptor) [pid 7540] close(21) = -1 EBADF (Bad file descriptor) [pid 7540] close(22) = -1 EBADF (Bad file descriptor) [pid 7540] close(23) = -1 EBADF (Bad file descriptor) [pid 7540] close(24) = -1 EBADF (Bad file descriptor) [pid 7540] close(25) = -1 EBADF (Bad file descriptor) [pid 7540] close(26) = -1 EBADF (Bad file descriptor) [pid 7540] close(27) = -1 EBADF (Bad file descriptor) [pid 7540] close(28) = -1 EBADF (Bad file descriptor) [pid 7540] close(29) = -1 EBADF (Bad file descriptor) [pid 7540] exit_group(0) = ? [pid 7541] <... futex resumed>) = ? [pid 7542] <... futex resumed>) = ? [pid 7541] +++ exited with 0 +++ [pid 7542] +++ exited with 0 +++ [pid 7540] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2498, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./839", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./839", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./839/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./839/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./839/cgroup.cpu") = 0 [pid 5028] umount2("./839/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./839/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./839/binderfs") = 0 [pid 5028] umount2("./839/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./839/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./839/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./839/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./839/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./839/file0") = 0 [pid 5028] umount2("./839/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./839/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./839/cgroup") = 0 [pid 5028] umount2("./839/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./839/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./839/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./839") = 0 [pid 5028] mkdir("./840", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2501 ./strace-static-x86_64: Process 7543 attached [pid 7543] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7543] chdir("./840") = 0 [pid 7543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7543] setpgid(0, 0) = 0 [pid 7543] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7543] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7543] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7543] write(3, "1000", 4) = 4 [pid 7543] close(3) = 0 [pid 7543] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7543] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7543] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7543] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7543] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7543] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7544 attached => {parent_tid=[2502]}, 88) = 2502 [pid 7544] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7543] rt_sigprocmask(SIG_SETMASK, [], [pid 7544] <... rseq resumed>) = 0 [pid 7543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7544] set_robust_list(0x7feeffcce9a0, 24 [pid 7543] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] <... set_robust_list resumed>) = 0 [pid 7544] rt_sigprocmask(SIG_SETMASK, [], [pid 7543] <... futex resumed>) = 0 [pid 7543] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7544] memfd_create("syzkaller", 0) = 3 [pid 7544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7544] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7544] munmap(0x7feef78ae000, 2097152) = 0 [pid 7544] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7544] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7544] close(3) = 0 [pid 7544] mkdir("./file0", 0777) = 0 [pid 7544] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7544] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7544] chdir("./file0") = 0 [pid 7544] ioctl(4, LOOP_CLR_FD) = 0 [pid 7544] close(4) = 0 [pid 7544] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7543] <... futex resumed>) = 0 [pid 7543] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7543] <... futex resumed>) = 0 [pid 7543] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7544] <... openat resumed>) = 4 [pid 7544] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7543] <... futex resumed>) = 0 [pid 7544] <... futex resumed>) = 1 [pid 7543] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7543] <... futex resumed>) = 0 [pid 7544] <... openat resumed>) = 5 [pid 7543] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7544] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7543] <... futex resumed>) = 0 [pid 7544] <... futex resumed>) = 1 [pid 7543] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7543] <... futex resumed>) = 0 [ 259.272090][ T7544] loop0: detected capacity change from 0 to 4096 [ 259.281332][ T7544] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 259.314963][ T7544] ntfs: volume version 3.1. [pid 7543] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7543] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7543] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7543] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7545 attached [pid 7545] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7545] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7543] <... clone3 resumed> => {parent_tid=[2503]}, 88) = 2503 [pid 7543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7543] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7543] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7545] ftruncate(4, 0) = 0 [pid 7545] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7544] <... write resumed>) = 1048064 [pid 7543] <... futex resumed>) = 0 [pid 7545] <... futex resumed>) = 1 [pid 7545] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7544] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7544] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7543] close(3) = 0 [pid 7543] close(4) = 0 [pid 7543] close(5) = 0 [pid 7543] close(6) = -1 EBADF (Bad file descriptor) [pid 7543] close(7) = -1 EBADF (Bad file descriptor) [pid 7543] close(8) = -1 EBADF (Bad file descriptor) [pid 7543] close(9) = -1 EBADF (Bad file descriptor) [pid 7543] close(10) = -1 EBADF (Bad file descriptor) [pid 7543] close(11) = -1 EBADF (Bad file descriptor) [pid 7543] close(12) = -1 EBADF (Bad file descriptor) [pid 7543] close(13) = -1 EBADF (Bad file descriptor) [pid 7543] close(14) = -1 EBADF (Bad file descriptor) [pid 7543] close(15) = -1 EBADF (Bad file descriptor) [pid 7543] close(16) = -1 EBADF (Bad file descriptor) [pid 7543] close(17) = -1 EBADF (Bad file descriptor) [pid 7543] close(18) = -1 EBADF (Bad file descriptor) [pid 7543] close(19) = -1 EBADF (Bad file descriptor) [pid 7543] close(20) = -1 EBADF (Bad file descriptor) [pid 7543] close(21) = -1 EBADF (Bad file descriptor) [pid 7543] close(22) = -1 EBADF (Bad file descriptor) [pid 7543] close(23) = -1 EBADF (Bad file descriptor) [pid 7543] close(24) = -1 EBADF (Bad file descriptor) [pid 7543] close(25) = -1 EBADF (Bad file descriptor) [pid 7543] close(26) = -1 EBADF (Bad file descriptor) [pid 7543] close(27) = -1 EBADF (Bad file descriptor) [pid 7543] close(28) = -1 EBADF (Bad file descriptor) [pid 7543] close(29) = -1 EBADF (Bad file descriptor) [pid 7543] exit_group(0 [pid 7544] <... futex resumed>) = ? [pid 7543] <... exit_group resumed>) = ? [pid 7545] <... futex resumed>) = ? [pid 7544] +++ exited with 0 +++ [pid 7545] +++ exited with 0 +++ [pid 7543] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2501, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./840", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./840", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./840/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./840/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./840/cgroup.cpu") = 0 [pid 5028] umount2("./840/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./840/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./840/binderfs") = 0 [pid 5028] umount2("./840/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./840/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./840/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./840/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./840/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./840/file0") = 0 [pid 5028] umount2("./840/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./840/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./840/cgroup") = 0 [pid 5028] umount2("./840/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./840/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./840/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./840") = 0 [pid 5028] mkdir("./841", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2504 ./strace-static-x86_64: Process 7546 attached [pid 7546] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7546] chdir("./841") = 0 [pid 7546] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7546] setpgid(0, 0) = 0 [pid 7546] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7546] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7546] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7546] write(3, "1000", 4) = 4 [pid 7546] close(3) = 0 [pid 7546] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7546] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7546] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7546] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7546] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7546] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7547 attached => {parent_tid=[2505]}, 88) = 2505 [pid 7547] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7546] rt_sigprocmask(SIG_SETMASK, [], [pid 7547] <... rseq resumed>) = 0 [pid 7547] set_robust_list(0x7feeffcce9a0, 24 [pid 7546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7547] <... set_robust_list resumed>) = 0 [pid 7547] rt_sigprocmask(SIG_SETMASK, [], [pid 7546] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7546] <... futex resumed>) = 0 [pid 7546] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7547] memfd_create("syzkaller", 0) = 3 [pid 7547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7547] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7547] munmap(0x7feef78ae000, 2097152) = 0 [pid 7547] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7547] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7547] close(3) = 0 [pid 7547] mkdir("./file0", 0777) = 0 [pid 7547] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7547] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7547] chdir("./file0") = 0 [pid 7547] ioctl(4, LOOP_CLR_FD) = 0 [pid 7547] close(4) = 0 [pid 7547] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7546] <... futex resumed>) = 0 [pid 7547] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7546] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7547] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7547] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7546] <... futex resumed>) = 0 [pid 7546] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7547] <... openat resumed>) = 4 [pid 7547] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7546] <... futex resumed>) = 0 [pid 7546] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7546] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7547] <... futex resumed>) = 1 [pid 7547] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7547] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7546] <... futex resumed>) = 0 [pid 7546] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7547] <... futex resumed>) = 1 [pid 7546] <... futex resumed>) = 0 [pid 7547] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 259.524785][ T7547] loop0: detected capacity change from 0 to 4096 [ 259.534435][ T7547] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 259.568007][ T7547] ntfs: volume version 3.1. [pid 7546] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7546] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7546] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7546] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7548 attached [pid 7548] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7546] <... clone3 resumed> => {parent_tid=[2506]}, 88) = 2506 [pid 7548] set_robust_list(0x7feef7aad9a0, 24 [pid 7546] rt_sigprocmask(SIG_SETMASK, [], [pid 7548] <... set_robust_list resumed>) = 0 [pid 7548] rt_sigprocmask(SIG_SETMASK, [], [pid 7546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7546] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7548] ftruncate(4, 0 [pid 7546] <... futex resumed>) = 0 [pid 7546] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7548] <... ftruncate resumed>) = 0 [pid 7548] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7548] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7546] <... futex resumed>) = 0 [pid 7547] <... write resumed>) = 1048064 [pid 7547] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7547] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7546] close(3) = 0 [pid 7546] close(4) = 0 [pid 7546] close(5) = 0 [pid 7546] close(6) = -1 EBADF (Bad file descriptor) [pid 7546] close(7) = -1 EBADF (Bad file descriptor) [pid 7546] close(8) = -1 EBADF (Bad file descriptor) [pid 7546] close(9) = -1 EBADF (Bad file descriptor) [pid 7546] close(10) = -1 EBADF (Bad file descriptor) [pid 7546] close(11) = -1 EBADF (Bad file descriptor) [pid 7546] close(12) = -1 EBADF (Bad file descriptor) [pid 7546] close(13) = -1 EBADF (Bad file descriptor) [pid 7546] close(14) = -1 EBADF (Bad file descriptor) [pid 7546] close(15) = -1 EBADF (Bad file descriptor) [pid 7546] close(16) = -1 EBADF (Bad file descriptor) [pid 7546] close(17) = -1 EBADF (Bad file descriptor) [pid 7546] close(18) = -1 EBADF (Bad file descriptor) [pid 7546] close(19) = -1 EBADF (Bad file descriptor) [pid 7546] close(20) = -1 EBADF (Bad file descriptor) [pid 7546] close(21) = -1 EBADF (Bad file descriptor) [pid 7546] close(22) = -1 EBADF (Bad file descriptor) [pid 7546] close(23) = -1 EBADF (Bad file descriptor) [pid 7546] close(24) = -1 EBADF (Bad file descriptor) [pid 7546] close(25) = -1 EBADF (Bad file descriptor) [pid 7546] close(26) = -1 EBADF (Bad file descriptor) [pid 7546] close(27) = -1 EBADF (Bad file descriptor) [pid 7546] close(28) = -1 EBADF (Bad file descriptor) [pid 7546] close(29) = -1 EBADF (Bad file descriptor) [pid 7546] exit_group(0) = ? [pid 7548] <... futex resumed>) = ? [pid 7547] <... futex resumed>) = ? [pid 7548] +++ exited with 0 +++ [pid 7547] +++ exited with 0 +++ [pid 7546] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2504, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./841", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./841", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./841/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./841/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./841/cgroup.cpu") = 0 [pid 5028] umount2("./841/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./841/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./841/binderfs") = 0 [pid 5028] umount2("./841/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./841/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./841/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./841/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./841/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./841/file0") = 0 [pid 5028] umount2("./841/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./841/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./841/cgroup") = 0 [pid 5028] umount2("./841/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./841/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./841/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./841") = 0 [pid 5028] mkdir("./842", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7549 attached , child_tidptr=0x5555563a5690) = 2507 [pid 7549] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7549] chdir("./842") = 0 [pid 7549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7549] setpgid(0, 0) = 0 [pid 7549] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7549] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7549] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7549] write(3, "1000", 4) = 4 [pid 7549] close(3) = 0 [pid 7549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7549] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7549] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7549] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7549] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7550 attached [pid 7550] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7549] <... clone3 resumed> => {parent_tid=[2508]}, 88) = 2508 [pid 7550] <... rseq resumed>) = 0 [pid 7550] set_robust_list(0x7feeffcce9a0, 24 [pid 7549] rt_sigprocmask(SIG_SETMASK, [], [pid 7550] <... set_robust_list resumed>) = 0 [pid 7549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7549] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7550] memfd_create("syzkaller", 0 [pid 7549] <... futex resumed>) = 0 [pid 7549] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7550] <... memfd_create resumed>) = 3 [pid 7550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7550] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7550] munmap(0x7feef78ae000, 2097152) = 0 [pid 7550] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7550] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7550] close(3) = 0 [pid 7550] mkdir("./file0", 0777) = 0 [pid 7550] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7550] chdir("./file0") = 0 [pid 7550] ioctl(4, LOOP_CLR_FD) = 0 [pid 7550] close(4) = 0 [pid 7550] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7549] <... futex resumed>) = 0 [pid 7550] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7549] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7550] <... futex resumed>) = 0 [pid 7549] <... futex resumed>) = 1 [pid 7550] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7549] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7550] <... openat resumed>) = 4 [pid 7550] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7549] <... futex resumed>) = 0 [pid 7550] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7549] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7550] <... openat resumed>) = 5 [pid 7549] <... futex resumed>) = 0 [pid 7549] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7550] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7549] <... futex resumed>) = 0 [pid 7550] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7549] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7550] <... futex resumed>) = 0 [pid 7549] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 259.772673][ T7550] loop0: detected capacity change from 0 to 4096 [ 259.795881][ T7550] ntfs: volume version 3.1. [pid 7550] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7549] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7549] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7549] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7549] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7549] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7549] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7551 attached [pid 7551] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7549] <... clone3 resumed> => {parent_tid=[2509]}, 88) = 2509 [pid 7551] <... rseq resumed>) = 0 [pid 7551] set_robust_list(0x7feef7aad9a0, 24 [pid 7549] rt_sigprocmask(SIG_SETMASK, [], [pid 7551] <... set_robust_list resumed>) = 0 [pid 7551] rt_sigprocmask(SIG_SETMASK, [], [pid 7549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7549] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7551] ftruncate(4, 0 [pid 7549] <... futex resumed>) = 0 [pid 7549] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7551] <... ftruncate resumed>) = 0 [pid 7551] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7549] <... futex resumed>) = 0 [pid 7551] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7550] <... write resumed>) = 1048064 [pid 7550] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7550] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7549] close(3) = 0 [pid 7549] close(4) = 0 [pid 7549] close(5) = 0 [pid 7549] close(6) = -1 EBADF (Bad file descriptor) [pid 7549] close(7) = -1 EBADF (Bad file descriptor) [pid 7549] close(8) = -1 EBADF (Bad file descriptor) [pid 7549] close(9) = -1 EBADF (Bad file descriptor) [pid 7549] close(10) = -1 EBADF (Bad file descriptor) [pid 7549] close(11) = -1 EBADF (Bad file descriptor) [pid 7549] close(12) = -1 EBADF (Bad file descriptor) [pid 7549] close(13) = -1 EBADF (Bad file descriptor) [pid 7549] close(14) = -1 EBADF (Bad file descriptor) [pid 7549] close(15) = -1 EBADF (Bad file descriptor) [pid 7549] close(16) = -1 EBADF (Bad file descriptor) [pid 7549] close(17) = -1 EBADF (Bad file descriptor) [pid 7549] close(18) = -1 EBADF (Bad file descriptor) [pid 7549] close(19) = -1 EBADF (Bad file descriptor) [pid 7549] close(20) = -1 EBADF (Bad file descriptor) [pid 7549] close(21) = -1 EBADF (Bad file descriptor) [pid 7549] close(22) = -1 EBADF (Bad file descriptor) [pid 7549] close(23) = -1 EBADF (Bad file descriptor) [pid 7549] close(24) = -1 EBADF (Bad file descriptor) [pid 7549] close(25) = -1 EBADF (Bad file descriptor) [pid 7549] close(26) = -1 EBADF (Bad file descriptor) [pid 7549] close(27) = -1 EBADF (Bad file descriptor) [pid 7549] close(28) = -1 EBADF (Bad file descriptor) [pid 7549] close(29) = -1 EBADF (Bad file descriptor) [pid 7549] exit_group(0 [pid 7551] <... futex resumed>) = ? [pid 7550] <... futex resumed>) = ? [pid 7551] +++ exited with 0 +++ [pid 7549] <... exit_group resumed>) = ? [pid 7550] +++ exited with 0 +++ [pid 7549] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2507, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./842", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./842", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./842/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./842/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./842/cgroup.cpu") = 0 [pid 5028] umount2("./842/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./842/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./842/binderfs") = 0 [pid 5028] umount2("./842/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./842/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./842/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./842/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./842/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./842/file0") = 0 [pid 5028] umount2("./842/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./842/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./842/cgroup") = 0 [pid 5028] umount2("./842/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./842/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./842/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./842") = 0 [pid 5028] mkdir("./843", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7552 attached , child_tidptr=0x5555563a5690) = 2510 [pid 7552] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7552] chdir("./843") = 0 [pid 7552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7552] setpgid(0, 0) = 0 [pid 7552] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7552] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7552] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7552] write(3, "1000", 4) = 4 [pid 7552] close(3) = 0 [pid 7552] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7552] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7552] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7552] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7552] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7552] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7552] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7553 attached [pid 7553] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7552] <... clone3 resumed> => {parent_tid=[2511]}, 88) = 2511 [pid 7553] <... rseq resumed>) = 0 [pid 7552] rt_sigprocmask(SIG_SETMASK, [], [pid 7553] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7552] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7553] rt_sigprocmask(SIG_SETMASK, [], [pid 7552] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7552] <... futex resumed>) = 0 [pid 7552] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7553] memfd_create("syzkaller", 0) = 3 [pid 7553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7553] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7553] munmap(0x7feef78ae000, 2097152) = 0 [pid 7553] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7553] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7553] close(3) = 0 [pid 7553] mkdir("./file0", 0777) = 0 [pid 7553] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7553] chdir("./file0") = 0 [pid 7553] ioctl(4, LOOP_CLR_FD) = 0 [pid 7553] close(4) = 0 [pid 7553] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7552] <... futex resumed>) = 0 [pid 7553] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7552] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7553] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7552] <... futex resumed>) = 0 [pid 7552] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7553] <... openat resumed>) = 4 [pid 7553] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7552] <... futex resumed>) = 0 [pid 7552] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7552] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7553] <... futex resumed>) = 1 [pid 7553] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7553] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7552] <... futex resumed>) = 0 [pid 7552] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7553] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 260.007381][ T7553] loop0: detected capacity change from 0 to 4096 [ 260.030188][ T7553] ntfs: volume version 3.1. [pid 7552] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7552] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7552] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7552] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7552] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7552] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7554 attached [pid 7554] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7552] <... clone3 resumed> => {parent_tid=[2512]}, 88) = 2512 [pid 7554] <... rseq resumed>) = 0 [pid 7552] rt_sigprocmask(SIG_SETMASK, [], [pid 7554] set_robust_list(0x7feef7aad9a0, 24 [pid 7552] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7552] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7552] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7554] <... set_robust_list resumed>) = 0 [pid 7554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7554] ftruncate(4, 0) = 0 [pid 7554] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7553] <... write resumed>) = 1048064 [pid 7553] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7553] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7554] <... futex resumed>) = 1 [pid 7552] <... futex resumed>) = 0 [pid 7554] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7552] close(3) = 0 [pid 7552] close(4) = 0 [pid 7552] close(5) = 0 [pid 7552] close(6) = -1 EBADF (Bad file descriptor) [pid 7552] close(7) = -1 EBADF (Bad file descriptor) [pid 7552] close(8) = -1 EBADF (Bad file descriptor) [pid 7552] close(9) = -1 EBADF (Bad file descriptor) [pid 7552] close(10) = -1 EBADF (Bad file descriptor) [pid 7552] close(11) = -1 EBADF (Bad file descriptor) [pid 7552] close(12) = -1 EBADF (Bad file descriptor) [pid 7552] close(13) = -1 EBADF (Bad file descriptor) [pid 7552] close(14) = -1 EBADF (Bad file descriptor) [pid 7552] close(15) = -1 EBADF (Bad file descriptor) [pid 7552] close(16) = -1 EBADF (Bad file descriptor) [pid 7552] close(17) = -1 EBADF (Bad file descriptor) [pid 7552] close(18) = -1 EBADF (Bad file descriptor) [pid 7552] close(19) = -1 EBADF (Bad file descriptor) [pid 7552] close(20) = -1 EBADF (Bad file descriptor) [pid 7552] close(21) = -1 EBADF (Bad file descriptor) [pid 7552] close(22) = -1 EBADF (Bad file descriptor) [pid 7552] close(23) = -1 EBADF (Bad file descriptor) [pid 7552] close(24) = -1 EBADF (Bad file descriptor) [pid 7552] close(25) = -1 EBADF (Bad file descriptor) [pid 7552] close(26) = -1 EBADF (Bad file descriptor) [pid 7552] close(27) = -1 EBADF (Bad file descriptor) [pid 7552] close(28) = -1 EBADF (Bad file descriptor) [pid 7552] close(29) = -1 EBADF (Bad file descriptor) [pid 7552] exit_group(0 [pid 7553] <... futex resumed>) = ? [pid 7554] <... futex resumed>) = ? [pid 7553] +++ exited with 0 +++ [pid 7554] +++ exited with 0 +++ [pid 7552] <... exit_group resumed>) = ? [pid 7552] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2510, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./843", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./843", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./843/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./843/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./843/cgroup.cpu") = 0 [pid 5028] umount2("./843/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./843/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./843/binderfs") = 0 [pid 5028] umount2("./843/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./843/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./843/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./843/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./843/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./843/file0") = 0 [pid 5028] umount2("./843/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./843/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./843/cgroup") = 0 [pid 5028] umount2("./843/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./843/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./843/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./843") = 0 [pid 5028] mkdir("./844", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7555 attached , child_tidptr=0x5555563a5690) = 2513 [pid 7555] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7555] chdir("./844") = 0 [pid 7555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7555] setpgid(0, 0) = 0 [pid 7555] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7555] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7555] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7555] write(3, "1000", 4) = 4 [pid 7555] close(3) = 0 [pid 7555] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7555] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7555] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7555] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7555] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7555] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7556 attached [pid 7556] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7555] <... clone3 resumed> => {parent_tid=[2514]}, 88) = 2514 [pid 7556] <... rseq resumed>) = 0 [pid 7555] rt_sigprocmask(SIG_SETMASK, [], [pid 7556] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7556] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7555] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7556] <... futex resumed>) = 0 [pid 7555] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7556] memfd_create("syzkaller", 0) = 3 [pid 7556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7556] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7556] munmap(0x7feef78ae000, 2097152) = 0 [pid 7556] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7556] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7556] close(3) = 0 [pid 7556] mkdir("./file0", 0777) = 0 [pid 7556] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7556] chdir("./file0") = 0 [pid 7556] ioctl(4, LOOP_CLR_FD) = 0 [pid 7556] close(4) = 0 [pid 7556] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7555] <... futex resumed>) = 0 [pid 7556] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7555] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7555] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7556] <... openat resumed>) = 4 [pid 7556] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... futex resumed>) = 0 [pid 7556] <... futex resumed>) = 1 [pid 7555] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7556] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7555] <... futex resumed>) = 0 [pid 7556] <... openat resumed>) = 5 [pid 7555] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7556] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7555] <... futex resumed>) = 0 [pid 7556] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7555] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 260.227758][ T7556] loop0: detected capacity change from 0 to 4096 [ 260.248712][ T7556] ntfs: volume version 3.1. [pid 7555] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7555] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7555] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7555] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7557 attached [pid 7557] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7557] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7557] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7556] <... write resumed>) = 1048064 [pid 7556] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7555] <... clone3 resumed> => {parent_tid=[2515]}, 88) = 2515 [pid 7556] <... futex resumed>) = 0 [pid 7555] rt_sigprocmask(SIG_SETMASK, [], [pid 7556] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7555] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7557] <... futex resumed>) = 0 [pid 7555] <... futex resumed>) = 1 [pid 7557] ftruncate(4, 0 [pid 7555] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7557] <... ftruncate resumed>) = 0 [pid 7557] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7555] <... futex resumed>) = 0 [pid 7557] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7555] close(3) = 0 [pid 7555] close(4) = 0 [pid 7555] close(5) = 0 [pid 7555] close(6) = -1 EBADF (Bad file descriptor) [pid 7555] close(7) = -1 EBADF (Bad file descriptor) [pid 7555] close(8) = -1 EBADF (Bad file descriptor) [pid 7555] close(9) = -1 EBADF (Bad file descriptor) [pid 7555] close(10) = -1 EBADF (Bad file descriptor) [pid 7555] close(11) = -1 EBADF (Bad file descriptor) [pid 7555] close(12) = -1 EBADF (Bad file descriptor) [pid 7555] close(13) = -1 EBADF (Bad file descriptor) [pid 7555] close(14) = -1 EBADF (Bad file descriptor) [pid 7555] close(15) = -1 EBADF (Bad file descriptor) [pid 7555] close(16) = -1 EBADF (Bad file descriptor) [pid 7555] close(17) = -1 EBADF (Bad file descriptor) [pid 7555] close(18) = -1 EBADF (Bad file descriptor) [pid 7555] close(19) = -1 EBADF (Bad file descriptor) [pid 7555] close(20) = -1 EBADF (Bad file descriptor) [pid 7555] close(21) = -1 EBADF (Bad file descriptor) [pid 7555] close(22) = -1 EBADF (Bad file descriptor) [pid 7555] close(23) = -1 EBADF (Bad file descriptor) [pid 7555] close(24) = -1 EBADF (Bad file descriptor) [pid 7555] close(25) = -1 EBADF (Bad file descriptor) [pid 7555] close(26) = -1 EBADF (Bad file descriptor) [pid 7555] close(27) = -1 EBADF (Bad file descriptor) [pid 7555] close(28) = -1 EBADF (Bad file descriptor) [pid 7555] close(29) = -1 EBADF (Bad file descriptor) [pid 7555] exit_group(0) = ? [pid 7557] <... futex resumed>) = ? [pid 7557] +++ exited with 0 +++ [pid 7556] <... futex resumed>) = ? [pid 7556] +++ exited with 0 +++ [pid 7555] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2513, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./844", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./844", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./844/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./844/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./844/cgroup.cpu") = 0 [pid 5028] umount2("./844/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./844/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./844/binderfs") = 0 [pid 5028] umount2("./844/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./844/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./844/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./844/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./844/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./844/file0") = 0 [pid 5028] umount2("./844/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./844/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./844/cgroup") = 0 [pid 5028] umount2("./844/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./844/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./844/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./844") = 0 [pid 5028] mkdir("./845", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2516 ./strace-static-x86_64: Process 7558 attached [pid 7558] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7558] chdir("./845") = 0 [pid 7558] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7558] setpgid(0, 0) = 0 [pid 7558] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7558] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7558] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7558] write(3, "1000", 4) = 4 [pid 7558] close(3) = 0 [pid 7558] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7558] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7558] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7558] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7558] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7558] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2517]}, 88) = 2517 ./strace-static-x86_64: Process 7559 attached [pid 7558] rt_sigprocmask(SIG_SETMASK, [], [pid 7559] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7558] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7559] <... rseq resumed>) = 0 [pid 7558] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7559] set_robust_list(0x7feeffcce9a0, 24 [pid 7558] <... futex resumed>) = 0 [pid 7558] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7559] <... set_robust_list resumed>) = 0 [pid 7559] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7559] memfd_create("syzkaller", 0) = 3 [pid 7559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7559] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7559] munmap(0x7feef78ae000, 2097152) = 0 [pid 7559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7559] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7559] close(3) = 0 [pid 7559] mkdir("./file0", 0777) = 0 [pid 7559] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7559] chdir("./file0") = 0 [pid 7559] ioctl(4, LOOP_CLR_FD) = 0 [pid 7559] close(4) = 0 [pid 7559] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7558] <... futex resumed>) = 0 [pid 7559] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7558] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7558] <... futex resumed>) = 0 [pid 7559] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7558] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... openat resumed>) = 4 [pid 7559] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7558] <... futex resumed>) = 0 [pid 7559] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7558] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7558] <... futex resumed>) = 0 [pid 7559] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7558] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... openat resumed>) = 5 [pid 7559] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7558] <... futex resumed>) = 0 [pid 7559] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7558] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7558] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7559] <... futex resumed>) = 0 [ 260.473187][ T7559] loop0: detected capacity change from 0 to 4096 [ 260.494719][ T7559] ntfs: volume version 3.1. [pid 7559] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7558] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7558] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7558] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7558] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7560 attached => {parent_tid=[2518]}, 88) = 2518 [pid 7560] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7558] rt_sigprocmask(SIG_SETMASK, [], [pid 7560] <... rseq resumed>) = 0 [pid 7558] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7560] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7558] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7558] <... futex resumed>) = 0 [pid 7560] ftruncate(4, 0 [pid 7558] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7560] <... ftruncate resumed>) = 0 [pid 7560] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7559] <... write resumed>) = 1048064 [pid 7560] <... futex resumed>) = 1 [pid 7558] <... futex resumed>) = 0 [pid 7559] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7560] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7558] close(3 [pid 7559] <... futex resumed>) = 0 [pid 7558] <... close resumed>) = 0 [pid 7559] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7558] close(4) = 0 [pid 7558] close(5) = 0 [pid 7558] close(6) = -1 EBADF (Bad file descriptor) [pid 7558] close(7) = -1 EBADF (Bad file descriptor) [pid 7558] close(8) = -1 EBADF (Bad file descriptor) [pid 7558] close(9) = -1 EBADF (Bad file descriptor) [pid 7558] close(10) = -1 EBADF (Bad file descriptor) [pid 7558] close(11) = -1 EBADF (Bad file descriptor) [pid 7558] close(12) = -1 EBADF (Bad file descriptor) [pid 7558] close(13) = -1 EBADF (Bad file descriptor) [pid 7558] close(14) = -1 EBADF (Bad file descriptor) [pid 7558] close(15) = -1 EBADF (Bad file descriptor) [pid 7558] close(16) = -1 EBADF (Bad file descriptor) [pid 7558] close(17) = -1 EBADF (Bad file descriptor) [pid 7558] close(18) = -1 EBADF (Bad file descriptor) [pid 7558] close(19) = -1 EBADF (Bad file descriptor) [pid 7558] close(20) = -1 EBADF (Bad file descriptor) [pid 7558] close(21) = -1 EBADF (Bad file descriptor) [pid 7558] close(22) = -1 EBADF (Bad file descriptor) [pid 7558] close(23) = -1 EBADF (Bad file descriptor) [pid 7558] close(24) = -1 EBADF (Bad file descriptor) [pid 7558] close(25) = -1 EBADF (Bad file descriptor) [pid 7558] close(26) = -1 EBADF (Bad file descriptor) [pid 7558] close(27) = -1 EBADF (Bad file descriptor) [pid 7558] close(28) = -1 EBADF (Bad file descriptor) [pid 7558] close(29) = -1 EBADF (Bad file descriptor) [pid 7558] exit_group(0) = ? [pid 7560] <... futex resumed>) = ? [pid 7559] <... futex resumed>) = ? [pid 7560] +++ exited with 0 +++ [pid 7559] +++ exited with 0 +++ [pid 7558] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2516, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./845", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./845", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./845/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./845/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./845/cgroup.cpu") = 0 [pid 5028] umount2("./845/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./845/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./845/binderfs") = 0 [pid 5028] umount2("./845/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./845/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./845/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./845/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./845/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./845/file0") = 0 [pid 5028] umount2("./845/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./845/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./845/cgroup") = 0 [pid 5028] umount2("./845/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./845/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./845/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./845") = 0 [pid 5028] mkdir("./846", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2519 ./strace-static-x86_64: Process 7561 attached [pid 7561] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7561] chdir("./846") = 0 [pid 7561] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7561] setpgid(0, 0) = 0 [pid 7561] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7561] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7561] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7561] write(3, "1000", 4) = 4 [pid 7561] close(3) = 0 [pid 7561] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7561] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7561] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7561] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7561] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7561] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7562 attached [pid 7562] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7562] set_robust_list(0x7feeffcce9a0, 24 [pid 7561] <... clone3 resumed> => {parent_tid=[2520]}, 88) = 2520 [pid 7562] <... set_robust_list resumed>) = 0 [pid 7561] rt_sigprocmask(SIG_SETMASK, [], [pid 7562] rt_sigprocmask(SIG_SETMASK, [], [pid 7561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7561] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7561] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7562] memfd_create("syzkaller", 0) = 3 [pid 7562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7562] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7562] munmap(0x7feef78ae000, 2097152) = 0 [pid 7562] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7562] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7562] close(3) = 0 [pid 7562] mkdir("./file0", 0777) = 0 [pid 7562] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7562] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7562] chdir("./file0") = 0 [pid 7562] ioctl(4, LOOP_CLR_FD) = 0 [pid 7562] close(4) = 0 [pid 7562] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7561] <... futex resumed>) = 0 [pid 7562] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7561] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7561] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7562] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7562] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7562] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7561] <... futex resumed>) = 0 [pid 7561] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7561] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7562] <... futex resumed>) = 0 [pid 7562] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7562] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7562] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7561] <... futex resumed>) = 0 [pid 7561] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7562] <... futex resumed>) = 0 [pid 7561] <... futex resumed>) = 1 [pid 7562] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 260.705082][ T7562] loop0: detected capacity change from 0 to 4096 [ 260.726867][ T7562] ntfs: volume version 3.1. [pid 7561] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7561] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7561] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7561] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7561] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7563 attached [pid 7563] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7563] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7563] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7561] <... clone3 resumed> => {parent_tid=[2521]}, 88) = 2521 [pid 7561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7561] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7563] <... futex resumed>) = 0 [pid 7561] <... futex resumed>) = 1 [pid 7563] ftruncate(4, 0 [pid 7561] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7563] <... ftruncate resumed>) = 0 [pid 7563] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7562] <... write resumed>) = 1048064 [pid 7563] <... futex resumed>) = 1 [pid 7562] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7561] <... futex resumed>) = 0 [pid 7563] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7562] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7561] close(3) = 0 [pid 7561] close(4) = 0 [pid 7561] close(5) = 0 [pid 7561] close(6) = -1 EBADF (Bad file descriptor) [pid 7561] close(7) = -1 EBADF (Bad file descriptor) [pid 7561] close(8) = -1 EBADF (Bad file descriptor) [pid 7561] close(9) = -1 EBADF (Bad file descriptor) [pid 7561] close(10) = -1 EBADF (Bad file descriptor) [pid 7561] close(11) = -1 EBADF (Bad file descriptor) [pid 7561] close(12) = -1 EBADF (Bad file descriptor) [pid 7561] close(13) = -1 EBADF (Bad file descriptor) [pid 7561] close(14) = -1 EBADF (Bad file descriptor) [pid 7561] close(15) = -1 EBADF (Bad file descriptor) [pid 7561] close(16) = -1 EBADF (Bad file descriptor) [pid 7561] close(17) = -1 EBADF (Bad file descriptor) [pid 7561] close(18) = -1 EBADF (Bad file descriptor) [pid 7561] close(19) = -1 EBADF (Bad file descriptor) [pid 7561] close(20) = -1 EBADF (Bad file descriptor) [pid 7561] close(21) = -1 EBADF (Bad file descriptor) [pid 7561] close(22) = -1 EBADF (Bad file descriptor) [pid 7561] close(23) = -1 EBADF (Bad file descriptor) [pid 7561] close(24) = -1 EBADF (Bad file descriptor) [pid 7561] close(25) = -1 EBADF (Bad file descriptor) [pid 7561] close(26) = -1 EBADF (Bad file descriptor) [pid 7561] close(27) = -1 EBADF (Bad file descriptor) [pid 7561] close(28) = -1 EBADF (Bad file descriptor) [pid 7561] close(29) = -1 EBADF (Bad file descriptor) [pid 7561] exit_group(0) = ? [pid 7563] <... futex resumed>) = ? [pid 7562] <... futex resumed>) = ? [pid 7563] +++ exited with 0 +++ [pid 7562] +++ exited with 0 +++ [pid 7561] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2519, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./846", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./846", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./846/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./846/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./846/cgroup.cpu") = 0 [pid 5028] umount2("./846/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./846/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./846/binderfs") = 0 [pid 5028] umount2("./846/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./846/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./846/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./846/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./846/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./846/file0") = 0 [pid 5028] umount2("./846/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./846/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./846/cgroup") = 0 [pid 5028] umount2("./846/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./846/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./846/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./846") = 0 [pid 5028] mkdir("./847", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7564 attached , child_tidptr=0x5555563a5690) = 2522 [pid 7564] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7564] chdir("./847") = 0 [pid 7564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7564] setpgid(0, 0) = 0 [pid 7564] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7564] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7564] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7564] write(3, "1000", 4) = 4 [pid 7564] close(3) = 0 [pid 7564] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7564] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7564] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7564] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7564] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7564] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7564] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7565 attached [pid 7565] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7564] <... clone3 resumed> => {parent_tid=[2523]}, 88) = 2523 [pid 7565] <... rseq resumed>) = 0 [pid 7565] set_robust_list(0x7feeffcce9a0, 24 [pid 7564] rt_sigprocmask(SIG_SETMASK, [], [pid 7565] <... set_robust_list resumed>) = 0 [pid 7565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7565] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7564] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7565] <... futex resumed>) = 0 [pid 7564] <... futex resumed>) = 1 [pid 7564] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7565] memfd_create("syzkaller", 0) = 3 [pid 7565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7565] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7565] munmap(0x7feef78ae000, 2097152) = 0 [pid 7565] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7565] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7565] close(3) = 0 [pid 7565] mkdir("./file0", 0777) = 0 [pid 7565] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7565] chdir("./file0") = 0 [pid 7565] ioctl(4, LOOP_CLR_FD) = 0 [pid 7565] close(4) = 0 [pid 7565] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7565] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7564] <... futex resumed>) = 0 [pid 7564] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7564] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7565] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7565] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7564] <... futex resumed>) = 0 [pid 7564] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7564] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7565] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7565] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7565] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7564] <... futex resumed>) = 0 [pid 7564] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7564] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7565] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 261.047710][ T7565] loop0: detected capacity change from 0 to 4096 [ 261.076435][ T7565] ntfs: volume version 3.1. [pid 7565] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7564] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7564] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7564] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7564] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7564] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7564] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7566 attached => {parent_tid=[2524]}, 88) = 2524 [pid 7564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7564] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7564] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7566] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7566] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7566] ftruncate(4, 0) = 0 [pid 7566] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7564] <... futex resumed>) = 0 [pid 7566] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7565] <... write resumed>) = 1048064 [pid 7565] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7565] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7564] close(3) = 0 [pid 7564] close(4) = 0 [pid 7564] close(5) = 0 [pid 7564] close(6) = -1 EBADF (Bad file descriptor) [pid 7564] close(7) = -1 EBADF (Bad file descriptor) [pid 7564] close(8) = -1 EBADF (Bad file descriptor) [pid 7564] close(9) = -1 EBADF (Bad file descriptor) [pid 7564] close(10) = -1 EBADF (Bad file descriptor) [pid 7564] close(11) = -1 EBADF (Bad file descriptor) [pid 7564] close(12) = -1 EBADF (Bad file descriptor) [pid 7564] close(13) = -1 EBADF (Bad file descriptor) [pid 7564] close(14) = -1 EBADF (Bad file descriptor) [pid 7564] close(15) = -1 EBADF (Bad file descriptor) [pid 7564] close(16) = -1 EBADF (Bad file descriptor) [pid 7564] close(17) = -1 EBADF (Bad file descriptor) [pid 7564] close(18) = -1 EBADF (Bad file descriptor) [pid 7564] close(19) = -1 EBADF (Bad file descriptor) [pid 7564] close(20) = -1 EBADF (Bad file descriptor) [pid 7564] close(21) = -1 EBADF (Bad file descriptor) [pid 7564] close(22) = -1 EBADF (Bad file descriptor) [pid 7564] close(23) = -1 EBADF (Bad file descriptor) [pid 7564] close(24) = -1 EBADF (Bad file descriptor) [pid 7564] close(25) = -1 EBADF (Bad file descriptor) [pid 7564] close(26) = -1 EBADF (Bad file descriptor) [pid 7564] close(27) = -1 EBADF (Bad file descriptor) [pid 7564] close(28) = -1 EBADF (Bad file descriptor) [pid 7564] close(29) = -1 EBADF (Bad file descriptor) [pid 7564] exit_group(0 [pid 7566] <... futex resumed>) = ? [pid 7564] <... exit_group resumed>) = ? [pid 7566] +++ exited with 0 +++ [pid 7565] <... futex resumed>) = ? [pid 7565] +++ exited with 0 +++ [pid 7564] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2522, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./847", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./847", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./847/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./847/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./847/cgroup.cpu") = 0 [pid 5028] umount2("./847/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./847/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./847/binderfs") = 0 [pid 5028] umount2("./847/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./847/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./847/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./847/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./847/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./847/file0") = 0 [pid 5028] umount2("./847/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./847/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./847/cgroup") = 0 [pid 5028] umount2("./847/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./847/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./847/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./847") = 0 [pid 5028] mkdir("./848", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7567 attached , child_tidptr=0x5555563a5690) = 2525 [pid 7567] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7567] chdir("./848") = 0 [pid 7567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7567] setpgid(0, 0) = 0 [pid 7567] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7567] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7567] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7567] write(3, "1000", 4) = 4 [pid 7567] close(3) = 0 [pid 7567] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7567] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7567] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7567] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7567] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7567] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7568 attached [pid 7568] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7567] <... clone3 resumed> => {parent_tid=[2526]}, 88) = 2526 [pid 7568] <... rseq resumed>) = 0 [pid 7567] rt_sigprocmask(SIG_SETMASK, [], [pid 7568] set_robust_list(0x7feeffcce9a0, 24 [pid 7567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7568] <... set_robust_list resumed>) = 0 [pid 7567] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7568] rt_sigprocmask(SIG_SETMASK, [], [pid 7567] <... futex resumed>) = 0 [pid 7568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7567] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7568] memfd_create("syzkaller", 0) = 3 [pid 7568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7568] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7568] munmap(0x7feef78ae000, 2097152) = 0 [pid 7568] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7568] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7568] close(3) = 0 [pid 7568] mkdir("./file0", 0777) = 0 [pid 7568] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7568] chdir("./file0") = 0 [pid 7568] ioctl(4, LOOP_CLR_FD) = 0 [pid 7568] close(4) = 0 [pid 7568] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7567] <... futex resumed>) = 0 [pid 7568] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7567] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7568] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7567] <... futex resumed>) = 0 [pid 7567] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7568] <... openat resumed>) = 4 [pid 7568] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7567] <... futex resumed>) = 0 [pid 7567] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7568] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7567] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7568] <... openat resumed>) = 5 [pid 7568] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7567] <... futex resumed>) = 0 [pid 7567] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7568] <... futex resumed>) = 1 [pid 7567] <... futex resumed>) = 0 [pid 7567] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 261.387159][ T7568] loop0: detected capacity change from 0 to 4096 [ 261.406892][ T7568] ntfs: volume version 3.1. [pid 7568] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7567] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7567] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7567] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7567] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7569 attached [pid 7569] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7567] <... clone3 resumed> => {parent_tid=[2527]}, 88) = 2527 [pid 7567] rt_sigprocmask(SIG_SETMASK, [], [pid 7569] <... rseq resumed>) = 0 [pid 7567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7569] set_robust_list(0x7feef7aad9a0, 24 [pid 7567] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7569] <... set_robust_list resumed>) = 0 [pid 7567] <... futex resumed>) = 0 [pid 7569] rt_sigprocmask(SIG_SETMASK, [], [pid 7567] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7569] ftruncate(4, 0) = 0 [pid 7569] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7567] <... futex resumed>) = 0 [pid 7569] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7568] <... write resumed>) = 1048064 [pid 7568] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7568] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7567] close(3) = 0 [pid 7567] close(4) = 0 [pid 7567] close(5) = 0 [pid 7567] close(6) = -1 EBADF (Bad file descriptor) [pid 7567] close(7) = -1 EBADF (Bad file descriptor) [pid 7567] close(8) = -1 EBADF (Bad file descriptor) [pid 7567] close(9) = -1 EBADF (Bad file descriptor) [pid 7567] close(10) = -1 EBADF (Bad file descriptor) [pid 7567] close(11) = -1 EBADF (Bad file descriptor) [pid 7567] close(12) = -1 EBADF (Bad file descriptor) [pid 7567] close(13) = -1 EBADF (Bad file descriptor) [pid 7567] close(14) = -1 EBADF (Bad file descriptor) [pid 7567] close(15) = -1 EBADF (Bad file descriptor) [pid 7567] close(16) = -1 EBADF (Bad file descriptor) [pid 7567] close(17) = -1 EBADF (Bad file descriptor) [pid 7567] close(18) = -1 EBADF (Bad file descriptor) [pid 7567] close(19) = -1 EBADF (Bad file descriptor) [pid 7567] close(20) = -1 EBADF (Bad file descriptor) [pid 7567] close(21) = -1 EBADF (Bad file descriptor) [pid 7567] close(22) = -1 EBADF (Bad file descriptor) [pid 7567] close(23) = -1 EBADF (Bad file descriptor) [pid 7567] close(24) = -1 EBADF (Bad file descriptor) [pid 7567] close(25) = -1 EBADF (Bad file descriptor) [pid 7567] close(26) = -1 EBADF (Bad file descriptor) [pid 7567] close(27) = -1 EBADF (Bad file descriptor) [pid 7567] close(28) = -1 EBADF (Bad file descriptor) [pid 7567] close(29) = -1 EBADF (Bad file descriptor) [pid 7567] exit_group(0 [pid 7569] <... futex resumed>) = ? [pid 7568] <... futex resumed>) = ? [pid 7569] +++ exited with 0 +++ [pid 7568] +++ exited with 0 +++ [pid 7567] <... exit_group resumed>) = ? [pid 7567] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2525, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./848", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./848", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./848/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./848/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./848/cgroup.cpu") = 0 [pid 5028] umount2("./848/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./848/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./848/binderfs") = 0 [pid 5028] umount2("./848/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./848/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./848/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./848/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./848/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./848/file0") = 0 [pid 5028] umount2("./848/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./848/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./848/cgroup") = 0 [pid 5028] umount2("./848/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./848/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./848/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./848") = 0 [pid 5028] mkdir("./849", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2528 ./strace-static-x86_64: Process 7570 attached [pid 7570] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7570] chdir("./849") = 0 [pid 7570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7570] setpgid(0, 0) = 0 [pid 7570] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7570] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7570] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7570] write(3, "1000", 4) = 4 [pid 7570] close(3) = 0 [pid 7570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7570] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7570] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7570] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7571 attached [pid 7571] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7570] <... clone3 resumed> => {parent_tid=[2529]}, 88) = 2529 [pid 7571] set_robust_list(0x7feeffcce9a0, 24 [pid 7570] rt_sigprocmask(SIG_SETMASK, [], [pid 7571] <... set_robust_list resumed>) = 0 [pid 7570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7571] rt_sigprocmask(SIG_SETMASK, [], [pid 7570] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7570] <... futex resumed>) = 0 [pid 7570] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7571] memfd_create("syzkaller", 0) = 3 [pid 7571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7571] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7571] munmap(0x7feef78ae000, 2097152) = 0 [pid 7571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7571] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7571] close(3) = 0 [pid 7571] mkdir("./file0", 0777) = 0 [pid 7571] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7571] chdir("./file0") = 0 [pid 7571] ioctl(4, LOOP_CLR_FD) = 0 [pid 7571] close(4) = 0 [pid 7571] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7571] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7570] <... futex resumed>) = 0 [pid 7570] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7571] <... futex resumed>) = 0 [pid 7571] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7570] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7571] <... openat resumed>) = 4 [pid 7571] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7571] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7570] <... futex resumed>) = 0 [pid 7570] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7571] <... futex resumed>) = 0 [pid 7570] <... futex resumed>) = 1 [pid 7571] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7570] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7571] <... openat resumed>) = 5 [pid 7571] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7570] <... futex resumed>) = 0 [pid 7570] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7571] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 261.603678][ T7571] loop0: detected capacity change from 0 to 4096 [ 261.625592][ T7571] ntfs: volume version 3.1. [pid 7570] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7570] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7570] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7572 attached => {parent_tid=[2530]}, 88) = 2530 [pid 7572] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7570] rt_sigprocmask(SIG_SETMASK, [], [pid 7572] <... rseq resumed>) = 0 [pid 7570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7572] set_robust_list(0x7feef7aad9a0, 24 [pid 7570] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7572] <... set_robust_list resumed>) = 0 [pid 7572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7570] <... futex resumed>) = 0 [pid 7572] ftruncate(4, 0 [pid 7570] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7572] <... ftruncate resumed>) = 0 [pid 7571] <... write resumed>) = 1048064 [pid 7572] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7570] <... futex resumed>) = 0 [pid 7572] <... futex resumed>) = 1 [pid 7572] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7571] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7571] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7570] close(3) = 0 [pid 7570] close(4) = 0 [pid 7570] close(5) = 0 [pid 7570] close(6) = -1 EBADF (Bad file descriptor) [pid 7570] close(7) = -1 EBADF (Bad file descriptor) [pid 7570] close(8) = -1 EBADF (Bad file descriptor) [pid 7570] close(9) = -1 EBADF (Bad file descriptor) [pid 7570] close(10) = -1 EBADF (Bad file descriptor) [pid 7570] close(11) = -1 EBADF (Bad file descriptor) [pid 7570] close(12) = -1 EBADF (Bad file descriptor) [pid 7570] close(13) = -1 EBADF (Bad file descriptor) [pid 7570] close(14) = -1 EBADF (Bad file descriptor) [pid 7570] close(15) = -1 EBADF (Bad file descriptor) [pid 7570] close(16) = -1 EBADF (Bad file descriptor) [pid 7570] close(17) = -1 EBADF (Bad file descriptor) [pid 7570] close(18) = -1 EBADF (Bad file descriptor) [pid 7570] close(19) = -1 EBADF (Bad file descriptor) [pid 7570] close(20) = -1 EBADF (Bad file descriptor) [pid 7570] close(21) = -1 EBADF (Bad file descriptor) [pid 7570] close(22) = -1 EBADF (Bad file descriptor) [pid 7570] close(23) = -1 EBADF (Bad file descriptor) [pid 7570] close(24) = -1 EBADF (Bad file descriptor) [pid 7570] close(25) = -1 EBADF (Bad file descriptor) [pid 7570] close(26) = -1 EBADF (Bad file descriptor) [pid 7570] close(27) = -1 EBADF (Bad file descriptor) [pid 7570] close(28) = -1 EBADF (Bad file descriptor) [pid 7570] close(29) = -1 EBADF (Bad file descriptor) [pid 7570] exit_group(0) = ? [pid 7571] <... futex resumed>) = ? [pid 7572] <... futex resumed>) = ? [pid 7571] +++ exited with 0 +++ [pid 7572] +++ exited with 0 +++ [pid 7570] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2528, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./849", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./849", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./849/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./849/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./849/cgroup.cpu") = 0 [pid 5028] umount2("./849/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./849/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./849/binderfs") = 0 [pid 5028] umount2("./849/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./849/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./849/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./849/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./849/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./849/file0") = 0 [pid 5028] umount2("./849/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./849/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./849/cgroup") = 0 [pid 5028] umount2("./849/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./849/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./849/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./849") = 0 [pid 5028] mkdir("./850", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7573 attached , child_tidptr=0x5555563a5690) = 2531 [pid 7573] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7573] chdir("./850") = 0 [pid 7573] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7573] setpgid(0, 0) = 0 [pid 7573] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7573] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7573] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7573] write(3, "1000", 4) = 4 [pid 7573] close(3) = 0 [pid 7573] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7573] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7573] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7573] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7573] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7573] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7573] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7574 attached => {parent_tid=[2532]}, 88) = 2532 [pid 7573] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7573] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7573] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7574] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7574] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7574] memfd_create("syzkaller", 0) = 3 [pid 7574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7574] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7574] munmap(0x7feef78ae000, 2097152) = 0 [pid 7574] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7574] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7574] close(3) = 0 [pid 7574] mkdir("./file0", 0777) = 0 [pid 7574] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7574] chdir("./file0") = 0 [pid 7574] ioctl(4, LOOP_CLR_FD) = 0 [pid 7574] close(4) = 0 [pid 7574] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7573] <... futex resumed>) = 0 [pid 7573] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7574] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7573] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7574] <... openat resumed>) = 4 [pid 7574] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7573] <... futex resumed>) = 0 [pid 7574] <... futex resumed>) = 1 [pid 7573] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7574] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7573] <... futex resumed>) = 0 [pid 7574] <... openat resumed>) = 5 [pid 7573] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7574] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7573] <... futex resumed>) = 0 [pid 7573] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7573] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 261.837214][ T7574] loop0: detected capacity change from 0 to 4096 [ 261.859137][ T7574] ntfs: volume version 3.1. [pid 7574] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7573] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7573] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7573] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7573] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7573] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7573] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7575 attached => {parent_tid=[2533]}, 88) = 2533 [pid 7575] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7573] rt_sigprocmask(SIG_SETMASK, [], [pid 7575] <... rseq resumed>) = 0 [pid 7573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7575] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7573] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7573] <... futex resumed>) = 0 [pid 7575] ftruncate(4, 0 [pid 7573] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7575] <... ftruncate resumed>) = 0 [pid 7574] <... write resumed>) = 1048064 [pid 7575] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7573] <... futex resumed>) = 0 [pid 7575] <... futex resumed>) = 1 [pid 7575] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7574] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7574] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7573] close(3) = 0 [pid 7573] close(4) = 0 [pid 7573] close(5) = 0 [pid 7573] close(6) = -1 EBADF (Bad file descriptor) [pid 7573] close(7) = -1 EBADF (Bad file descriptor) [pid 7573] close(8) = -1 EBADF (Bad file descriptor) [pid 7573] close(9) = -1 EBADF (Bad file descriptor) [pid 7573] close(10) = -1 EBADF (Bad file descriptor) [pid 7573] close(11) = -1 EBADF (Bad file descriptor) [pid 7573] close(12) = -1 EBADF (Bad file descriptor) [pid 7573] close(13) = -1 EBADF (Bad file descriptor) [pid 7573] close(14) = -1 EBADF (Bad file descriptor) [pid 7573] close(15) = -1 EBADF (Bad file descriptor) [pid 7573] close(16) = -1 EBADF (Bad file descriptor) [pid 7573] close(17) = -1 EBADF (Bad file descriptor) [pid 7573] close(18) = -1 EBADF (Bad file descriptor) [pid 7573] close(19) = -1 EBADF (Bad file descriptor) [pid 7573] close(20) = -1 EBADF (Bad file descriptor) [pid 7573] close(21) = -1 EBADF (Bad file descriptor) [pid 7573] close(22) = -1 EBADF (Bad file descriptor) [pid 7573] close(23) = -1 EBADF (Bad file descriptor) [pid 7573] close(24) = -1 EBADF (Bad file descriptor) [pid 7573] close(25) = -1 EBADF (Bad file descriptor) [pid 7573] close(26) = -1 EBADF (Bad file descriptor) [pid 7573] close(27) = -1 EBADF (Bad file descriptor) [pid 7573] close(28) = -1 EBADF (Bad file descriptor) [pid 7573] close(29) = -1 EBADF (Bad file descriptor) [pid 7573] exit_group(0 [pid 7574] <... futex resumed>) = ? [pid 7573] <... exit_group resumed>) = ? [pid 7575] <... futex resumed>) = ? [pid 7574] +++ exited with 0 +++ [pid 7575] +++ exited with 0 +++ [pid 7573] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2531, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./850", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./850", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./850/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./850/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./850/cgroup.cpu") = 0 [pid 5028] umount2("./850/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./850/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./850/binderfs") = 0 [pid 5028] umount2("./850/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./850/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./850/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./850/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./850/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./850/file0") = 0 [pid 5028] umount2("./850/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./850/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./850/cgroup") = 0 [pid 5028] umount2("./850/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./850/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./850/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./850") = 0 [pid 5028] mkdir("./851", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7576 attached , child_tidptr=0x5555563a5690) = 2534 [pid 7576] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7576] chdir("./851") = 0 [pid 7576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7576] setpgid(0, 0) = 0 [pid 7576] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7576] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7576] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7576] write(3, "1000", 4) = 4 [pid 7576] close(3) = 0 [pid 7576] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7576] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7576] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7576] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7576] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2535]}, 88) = 2535 [pid 7576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7576] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7576] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7577 attached [pid 7577] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7577] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7577] memfd_create("syzkaller", 0) = 3 [pid 7577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7577] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7577] munmap(0x7feef78ae000, 2097152) = 0 [pid 7577] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7577] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7577] close(3) = 0 [pid 7577] mkdir("./file0", 0777) = 0 [pid 7577] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7577] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7577] chdir("./file0") = 0 [pid 7577] ioctl(4, LOOP_CLR_FD) = 0 [pid 7577] close(4) = 0 [pid 7577] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7577] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7576] <... futex resumed>) = 0 [pid 7576] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7577] <... futex resumed>) = 0 [pid 7576] <... futex resumed>) = 1 [pid 7577] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7576] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7577] <... openat resumed>) = 4 [pid 7577] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7576] <... futex resumed>) = 0 [pid 7577] <... futex resumed>) = 1 [pid 7577] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7576] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7577] <... openat resumed>) = 5 [pid 7576] <... futex resumed>) = 0 [pid 7577] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7576] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7577] <... futex resumed>) = 0 [pid 7576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7577] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7576] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7576] <... futex resumed>) = 0 [pid 7577] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 262.053950][ T7577] loop0: detected capacity change from 0 to 4096 [ 262.075593][ T7577] ntfs: volume version 3.1. [pid 7576] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7576] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7576] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7576] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7578 attached => {parent_tid=[2536]}, 88) = 2536 [pid 7576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7578] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7576] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7576] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7578] <... rseq resumed>) = 0 [pid 7578] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7578] ftruncate(4, 0) = 0 [pid 7578] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7577] <... write resumed>) = 1048064 [pid 7576] <... futex resumed>) = 0 [pid 7578] <... futex resumed>) = 1 [pid 7577] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7576] close(3 [pid 7578] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7577] <... futex resumed>) = 0 [pid 7576] <... close resumed>) = 0 [pid 7577] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7576] close(4) = 0 [pid 7576] close(5) = 0 [pid 7576] close(6) = -1 EBADF (Bad file descriptor) [pid 7576] close(7) = -1 EBADF (Bad file descriptor) [pid 7576] close(8) = -1 EBADF (Bad file descriptor) [pid 7576] close(9) = -1 EBADF (Bad file descriptor) [pid 7576] close(10) = -1 EBADF (Bad file descriptor) [pid 7576] close(11) = -1 EBADF (Bad file descriptor) [pid 7576] close(12) = -1 EBADF (Bad file descriptor) [pid 7576] close(13) = -1 EBADF (Bad file descriptor) [pid 7576] close(14) = -1 EBADF (Bad file descriptor) [pid 7576] close(15) = -1 EBADF (Bad file descriptor) [pid 7576] close(16) = -1 EBADF (Bad file descriptor) [pid 7576] close(17) = -1 EBADF (Bad file descriptor) [pid 7576] close(18) = -1 EBADF (Bad file descriptor) [pid 7576] close(19) = -1 EBADF (Bad file descriptor) [pid 7576] close(20) = -1 EBADF (Bad file descriptor) [pid 7576] close(21) = -1 EBADF (Bad file descriptor) [pid 7576] close(22) = -1 EBADF (Bad file descriptor) [pid 7576] close(23) = -1 EBADF (Bad file descriptor) [pid 7576] close(24) = -1 EBADF (Bad file descriptor) [pid 7576] close(25) = -1 EBADF (Bad file descriptor) [pid 7576] close(26) = -1 EBADF (Bad file descriptor) [pid 7576] close(27) = -1 EBADF (Bad file descriptor) [pid 7576] close(28) = -1 EBADF (Bad file descriptor) [pid 7576] close(29) = -1 EBADF (Bad file descriptor) [pid 7576] exit_group(0 [pid 7578] <... futex resumed>) = ? [pid 7577] <... futex resumed>) = ? [pid 7576] <... exit_group resumed>) = ? [pid 7578] +++ exited with 0 +++ [pid 7577] +++ exited with 0 +++ [pid 7576] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2534, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./851", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./851", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./851/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./851/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./851/cgroup.cpu") = 0 [pid 5028] umount2("./851/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./851/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./851/binderfs") = 0 [pid 5028] umount2("./851/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./851/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./851/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./851/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./851/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./851/file0") = 0 [pid 5028] umount2("./851/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./851/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./851/cgroup") = 0 [pid 5028] umount2("./851/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./851/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./851/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./851") = 0 [pid 5028] mkdir("./852", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7579 attached , child_tidptr=0x5555563a5690) = 2537 [pid 7579] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7579] chdir("./852") = 0 [pid 7579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7579] setpgid(0, 0) = 0 [pid 7579] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7579] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7579] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7579] write(3, "1000", 4) = 4 [pid 7579] close(3) = 0 [pid 7579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7579] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7579] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7579] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7579] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7579] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7580 attached [pid 7580] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7579] <... clone3 resumed> => {parent_tid=[2538]}, 88) = 2538 [pid 7579] rt_sigprocmask(SIG_SETMASK, [], [pid 7580] <... rseq resumed>) = 0 [pid 7579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7580] set_robust_list(0x7feeffcce9a0, 24 [pid 7579] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7580] <... set_robust_list resumed>) = 0 [pid 7579] <... futex resumed>) = 0 [pid 7580] rt_sigprocmask(SIG_SETMASK, [], [pid 7579] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7580] memfd_create("syzkaller", 0) = 3 [pid 7580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7580] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7580] munmap(0x7feef78ae000, 2097152) = 0 [pid 7580] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7580] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7580] close(3) = 0 [pid 7580] mkdir("./file0", 0777) = 0 [ 262.298380][ T7580] loop0: detected capacity change from 0 to 4096 [ 262.307088][ T7580] __ntfs_warning: 10 callbacks suppressed [ 262.307101][ T7580] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7580] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7580] chdir("./file0") = 0 [pid 7580] ioctl(4, LOOP_CLR_FD) = 0 [pid 7580] close(4) = 0 [pid 7580] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7579] <... futex resumed>) = 0 [pid 7580] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7579] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7580] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7579] <... futex resumed>) = 0 [pid 7579] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7580] <... openat resumed>) = 4 [pid 7580] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7579] <... futex resumed>) = 0 [pid 7579] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7579] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7580] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7580] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7579] <... futex resumed>) = 0 [pid 7580] <... futex resumed>) = 1 [pid 7579] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7580] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7579] <... futex resumed>) = 0 [ 262.345296][ T7580] ntfs: volume version 3.1. [pid 7579] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7579] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7579] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7579] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7579] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7579] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7581 attached => {parent_tid=[2539]}, 88) = 2539 [pid 7579] rt_sigprocmask(SIG_SETMASK, [], [pid 7581] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7581] set_robust_list(0x7feef7aad9a0, 24 [pid 7579] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7579] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7581] <... set_robust_list resumed>) = 0 [pid 7581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7581] ftruncate(4, 0) = 0 [pid 7581] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7580] <... write resumed>) = 1048064 [pid 7581] <... futex resumed>) = 1 [pid 7579] <... futex resumed>) = 0 [pid 7581] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7580] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7580] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7579] close(3) = 0 [pid 7579] close(4) = 0 [pid 7579] close(5) = 0 [pid 7579] close(6) = -1 EBADF (Bad file descriptor) [pid 7579] close(7) = -1 EBADF (Bad file descriptor) [pid 7579] close(8) = -1 EBADF (Bad file descriptor) [pid 7579] close(9) = -1 EBADF (Bad file descriptor) [pid 7579] close(10) = -1 EBADF (Bad file descriptor) [pid 7579] close(11) = -1 EBADF (Bad file descriptor) [pid 7579] close(12) = -1 EBADF (Bad file descriptor) [pid 7579] close(13) = -1 EBADF (Bad file descriptor) [pid 7579] close(14) = -1 EBADF (Bad file descriptor) [pid 7579] close(15) = -1 EBADF (Bad file descriptor) [pid 7579] close(16) = -1 EBADF (Bad file descriptor) [pid 7579] close(17) = -1 EBADF (Bad file descriptor) [pid 7579] close(18) = -1 EBADF (Bad file descriptor) [pid 7579] close(19) = -1 EBADF (Bad file descriptor) [pid 7579] close(20) = -1 EBADF (Bad file descriptor) [pid 7579] close(21) = -1 EBADF (Bad file descriptor) [pid 7579] close(22) = -1 EBADF (Bad file descriptor) [pid 7579] close(23) = -1 EBADF (Bad file descriptor) [pid 7579] close(24) = -1 EBADF (Bad file descriptor) [pid 7579] close(25) = -1 EBADF (Bad file descriptor) [pid 7579] close(26) = -1 EBADF (Bad file descriptor) [pid 7579] close(27) = -1 EBADF (Bad file descriptor) [pid 7579] close(28) = -1 EBADF (Bad file descriptor) [pid 7579] close(29) = -1 EBADF (Bad file descriptor) [pid 7579] exit_group(0) = ? [pid 7581] <... futex resumed>) = ? [pid 7580] <... futex resumed>) = ? [pid 7581] +++ exited with 0 +++ [pid 7580] +++ exited with 0 +++ [pid 7579] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2537, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./852", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./852", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./852/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./852/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./852/cgroup.cpu") = 0 [pid 5028] umount2("./852/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./852/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./852/binderfs") = 0 [pid 5028] umount2("./852/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./852/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./852/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./852/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./852/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./852/file0") = 0 [pid 5028] umount2("./852/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./852/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./852/cgroup") = 0 [pid 5028] umount2("./852/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./852/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./852/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./852") = 0 [pid 5028] mkdir("./853", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2540 ./strace-static-x86_64: Process 7582 attached [pid 7582] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7582] chdir("./853") = 0 [pid 7582] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7582] setpgid(0, 0) = 0 [pid 7582] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7582] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7582] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7582] write(3, "1000", 4) = 4 [pid 7582] close(3) = 0 [pid 7582] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7582] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7582] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7582] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7582] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7582] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7582] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2541]}, 88) = 2541 [pid 7582] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7582] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7582] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7583 attached [pid 7583] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7583] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7583] memfd_create("syzkaller", 0) = 3 [pid 7583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7583] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7583] munmap(0x7feef78ae000, 2097152) = 0 [pid 7583] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7583] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7583] close(3) = 0 [pid 7583] mkdir("./file0", 0777) = 0 [pid 7583] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7583] chdir("./file0") = 0 [pid 7583] ioctl(4, LOOP_CLR_FD) = 0 [pid 7583] close(4) = 0 [pid 7583] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7582] <... futex resumed>) = 0 [pid 7583] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7582] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7582] <... futex resumed>) = 0 [pid 7583] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7582] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7583] <... openat resumed>) = 4 [pid 7583] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7582] <... futex resumed>) = 0 [pid 7583] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7582] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7582] <... futex resumed>) = 0 [pid 7583] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7582] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7583] <... openat resumed>) = 5 [pid 7583] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7582] <... futex resumed>) = 0 [pid 7583] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7582] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7582] <... futex resumed>) = 0 [pid 7583] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 262.571717][ T7583] loop0: detected capacity change from 0 to 4096 [ 262.580710][ T7583] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 262.613699][ T7583] ntfs: volume version 3.1. [pid 7582] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7582] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7582] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7582] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7582] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7584 attached [pid 7584] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7582] <... clone3 resumed> => {parent_tid=[2542]}, 88) = 2542 [pid 7584] <... rseq resumed>) = 0 [pid 7584] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7582] rt_sigprocmask(SIG_SETMASK, [], [pid 7584] rt_sigprocmask(SIG_SETMASK, [], [pid 7582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7582] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7584] ftruncate(4, 0 [pid 7582] <... futex resumed>) = 0 [pid 7582] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7584] <... ftruncate resumed>) = 0 [pid 7583] <... write resumed>) = 1048064 [pid 7583] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7583] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7584] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7582] <... futex resumed>) = 0 [pid 7582] close(3) = 0 [pid 7582] close(4) = 0 [pid 7582] close(5) = 0 [pid 7582] close(6) = -1 EBADF (Bad file descriptor) [pid 7582] close(7) = -1 EBADF (Bad file descriptor) [pid 7582] close(8) = -1 EBADF (Bad file descriptor) [pid 7584] <... futex resumed>) = 1 [pid 7582] close(9) = -1 EBADF (Bad file descriptor) [pid 7582] close(10 [pid 7584] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7582] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7582] close(11) = -1 EBADF (Bad file descriptor) [pid 7582] close(12) = -1 EBADF (Bad file descriptor) [pid 7582] close(13) = -1 EBADF (Bad file descriptor) [pid 7582] close(14) = -1 EBADF (Bad file descriptor) [pid 7582] close(15) = -1 EBADF (Bad file descriptor) [pid 7582] close(16) = -1 EBADF (Bad file descriptor) [pid 7582] close(17) = -1 EBADF (Bad file descriptor) [pid 7582] close(18) = -1 EBADF (Bad file descriptor) [pid 7582] close(19) = -1 EBADF (Bad file descriptor) [pid 7582] close(20) = -1 EBADF (Bad file descriptor) [pid 7582] close(21) = -1 EBADF (Bad file descriptor) [pid 7582] close(22) = -1 EBADF (Bad file descriptor) [pid 7582] close(23) = -1 EBADF (Bad file descriptor) [pid 7582] close(24) = -1 EBADF (Bad file descriptor) [pid 7582] close(25) = -1 EBADF (Bad file descriptor) [pid 7582] close(26) = -1 EBADF (Bad file descriptor) [pid 7582] close(27) = -1 EBADF (Bad file descriptor) [pid 7582] close(28) = -1 EBADF (Bad file descriptor) [pid 7582] close(29) = -1 EBADF (Bad file descriptor) [pid 7582] exit_group(0 [pid 7583] <... futex resumed>) = ? [pid 7582] <... exit_group resumed>) = ? [pid 7584] <... futex resumed>) = ? [pid 7583] +++ exited with 0 +++ [pid 7584] +++ exited with 0 +++ [pid 7582] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2540, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./853", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./853", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./853/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./853/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./853/cgroup.cpu") = 0 [pid 5028] umount2("./853/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./853/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./853/binderfs") = 0 [pid 5028] umount2("./853/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./853/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./853/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./853/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./853/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./853/file0") = 0 [pid 5028] umount2("./853/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./853/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./853/cgroup") = 0 [pid 5028] umount2("./853/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./853/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./853/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./853") = 0 [pid 5028] mkdir("./854", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7585 attached [pid 7585] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2543 [pid 7585] <... set_robust_list resumed>) = 0 [pid 7585] chdir("./854") = 0 [pid 7585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7585] setpgid(0, 0) = 0 [pid 7585] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7585] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7585] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7585] write(3, "1000", 4) = 4 [pid 7585] close(3) = 0 [pid 7585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7585] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7585] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7586 attached [pid 7586] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7586] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7586] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] <... clone3 resumed> => {parent_tid=[2544]}, 88) = 2544 [pid 7585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7585] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7586] <... futex resumed>) = 0 [pid 7585] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7586] memfd_create("syzkaller", 0) = 3 [pid 7586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7586] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7586] munmap(0x7feef78ae000, 2097152) = 0 [pid 7586] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7586] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7586] close(3) = 0 [pid 7586] mkdir("./file0", 0777) = 0 [pid 7586] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7586] chdir("./file0") = 0 [pid 7586] ioctl(4, LOOP_CLR_FD) = 0 [pid 7586] close(4) = 0 [pid 7586] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7586] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7585] <... futex resumed>) = 0 [pid 7586] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7585] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] <... openat resumed>) = 4 [pid 7586] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7585] <... futex resumed>) = 0 [pid 7586] <... futex resumed>) = 1 [pid 7585] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7586] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7585] <... futex resumed>) = 0 [pid 7586] <... futex resumed>) = 0 [pid 7585] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7586] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7585] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] <... futex resumed>) = 0 [pid 7585] <... futex resumed>) = 1 [pid 7585] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 262.840768][ T7586] loop0: detected capacity change from 0 to 4096 [ 262.849623][ T7586] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 262.882493][ T7586] ntfs: volume version 3.1. [pid 7586] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7585] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7585] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7587 attached [pid 7587] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7585] <... clone3 resumed> => {parent_tid=[2545]}, 88) = 2545 [pid 7587] <... rseq resumed>) = 0 [pid 7585] rt_sigprocmask(SIG_SETMASK, [], [pid 7587] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7587] rt_sigprocmask(SIG_SETMASK, [], [pid 7585] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7585] <... futex resumed>) = 0 [pid 7587] ftruncate(4, 0 [pid 7585] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7587] <... ftruncate resumed>) = 0 [pid 7587] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7586] <... write resumed>) = 1048064 [pid 7587] <... futex resumed>) = 1 [pid 7585] <... futex resumed>) = 0 [pid 7587] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7586] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7585] close(3 [pid 7586] <... futex resumed>) = 0 [pid 7586] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7585] <... close resumed>) = 0 [pid 7585] close(4) = 0 [pid 7585] close(5) = 0 [pid 7585] close(6) = -1 EBADF (Bad file descriptor) [pid 7585] close(7) = -1 EBADF (Bad file descriptor) [pid 7585] close(8) = -1 EBADF (Bad file descriptor) [pid 7585] close(9) = -1 EBADF (Bad file descriptor) [pid 7585] close(10) = -1 EBADF (Bad file descriptor) [pid 7585] close(11) = -1 EBADF (Bad file descriptor) [pid 7585] close(12) = -1 EBADF (Bad file descriptor) [pid 7585] close(13) = -1 EBADF (Bad file descriptor) [pid 7585] close(14) = -1 EBADF (Bad file descriptor) [pid 7585] close(15) = -1 EBADF (Bad file descriptor) [pid 7585] close(16) = -1 EBADF (Bad file descriptor) [pid 7585] close(17) = -1 EBADF (Bad file descriptor) [pid 7585] close(18) = -1 EBADF (Bad file descriptor) [pid 7585] close(19) = -1 EBADF (Bad file descriptor) [pid 7585] close(20) = -1 EBADF (Bad file descriptor) [pid 7585] close(21) = -1 EBADF (Bad file descriptor) [pid 7585] close(22) = -1 EBADF (Bad file descriptor) [pid 7585] close(23) = -1 EBADF (Bad file descriptor) [pid 7585] close(24) = -1 EBADF (Bad file descriptor) [pid 7585] close(25) = -1 EBADF (Bad file descriptor) [pid 7585] close(26) = -1 EBADF (Bad file descriptor) [pid 7585] close(27) = -1 EBADF (Bad file descriptor) [pid 7585] close(28) = -1 EBADF (Bad file descriptor) [pid 7585] close(29) = -1 EBADF (Bad file descriptor) [pid 7585] exit_group(0 [pid 7587] <... futex resumed>) = ? [pid 7586] <... futex resumed>) = ? [pid 7586] +++ exited with 0 +++ [pid 7585] <... exit_group resumed>) = ? [pid 7587] +++ exited with 0 +++ [pid 7585] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2543, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./854", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./854", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./854/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./854/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./854/cgroup.cpu") = 0 [pid 5028] umount2("./854/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./854/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./854/binderfs") = 0 [pid 5028] umount2("./854/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./854/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./854/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./854/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./854/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./854/file0") = 0 [pid 5028] umount2("./854/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./854/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./854/cgroup") = 0 [pid 5028] umount2("./854/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./854/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./854/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./854") = 0 [pid 5028] mkdir("./855", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7588 attached , child_tidptr=0x5555563a5690) = 2546 [pid 7588] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7588] chdir("./855") = 0 [pid 7588] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7588] setpgid(0, 0) = 0 [pid 7588] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7588] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7588] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7588] write(3, "1000", 4) = 4 [pid 7588] close(3) = 0 [pid 7588] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7588] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7588] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7588] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7588] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7589 attached [pid 7589] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7588] <... clone3 resumed> => {parent_tid=[2547]}, 88) = 2547 [pid 7589] <... rseq resumed>) = 0 [pid 7588] rt_sigprocmask(SIG_SETMASK, [], [pid 7589] set_robust_list(0x7feeffcce9a0, 24 [pid 7588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7589] <... set_robust_list resumed>) = 0 [pid 7589] rt_sigprocmask(SIG_SETMASK, [], [pid 7588] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7589] memfd_create("syzkaller", 0 [pid 7588] <... futex resumed>) = 0 [pid 7589] <... memfd_create resumed>) = 3 [pid 7588] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7589] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7589] munmap(0x7feef78ae000, 2097152) = 0 [pid 7589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7589] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7589] close(3) = 0 [pid 7589] mkdir("./file0", 0777) = 0 [pid 7589] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7589] chdir("./file0") = 0 [pid 7589] ioctl(4, LOOP_CLR_FD) = 0 [pid 7589] close(4) = 0 [pid 7589] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7588] <... futex resumed>) = 0 [pid 7588] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7588] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7589] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7589] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7588] <... futex resumed>) = 0 [pid 7589] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7588] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7589] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7588] <... futex resumed>) = 0 [pid 7589] <... openat resumed>) = 5 [pid 7588] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7589] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7588] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7589] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7588] <... futex resumed>) = 0 [ 263.070855][ T7589] loop0: detected capacity change from 0 to 4096 [ 263.079989][ T7589] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.114976][ T7589] ntfs: volume version 3.1. [pid 7588] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7588] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7588] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2548]}, 88) = 2548 [pid 7588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7590 attached [pid 7588] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7590] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7588] <... futex resumed>) = 0 [pid 7590] <... rseq resumed>) = 0 [pid 7588] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7590] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7590] ftruncate(4, 0) = 0 [pid 7590] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7589] <... write resumed>) = 1048064 [pid 7590] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7589] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7589] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7588] <... futex resumed>) = 0 [pid 7588] close(3) = 0 [pid 7588] close(4) = 0 [pid 7588] close(5) = 0 [pid 7588] close(6) = -1 EBADF (Bad file descriptor) [pid 7588] close(7) = -1 EBADF (Bad file descriptor) [pid 7588] close(8) = -1 EBADF (Bad file descriptor) [pid 7588] close(9) = -1 EBADF (Bad file descriptor) [pid 7588] close(10) = -1 EBADF (Bad file descriptor) [pid 7588] close(11) = -1 EBADF (Bad file descriptor) [pid 7588] close(12) = -1 EBADF (Bad file descriptor) [pid 7588] close(13) = -1 EBADF (Bad file descriptor) [pid 7588] close(14) = -1 EBADF (Bad file descriptor) [pid 7588] close(15) = -1 EBADF (Bad file descriptor) [pid 7588] close(16) = -1 EBADF (Bad file descriptor) [pid 7588] close(17) = -1 EBADF (Bad file descriptor) [pid 7588] close(18) = -1 EBADF (Bad file descriptor) [pid 7588] close(19) = -1 EBADF (Bad file descriptor) [pid 7588] close(20) = -1 EBADF (Bad file descriptor) [pid 7588] close(21) = -1 EBADF (Bad file descriptor) [pid 7588] close(22) = -1 EBADF (Bad file descriptor) [pid 7588] close(23) = -1 EBADF (Bad file descriptor) [pid 7588] close(24) = -1 EBADF (Bad file descriptor) [pid 7588] close(25) = -1 EBADF (Bad file descriptor) [pid 7588] close(26) = -1 EBADF (Bad file descriptor) [pid 7588] close(27) = -1 EBADF (Bad file descriptor) [pid 7588] close(28) = -1 EBADF (Bad file descriptor) [pid 7588] close(29) = -1 EBADF (Bad file descriptor) [pid 7588] exit_group(0) = ? [pid 7590] <... futex resumed>) = ? [pid 7589] <... futex resumed>) = ? [pid 7590] +++ exited with 0 +++ [pid 7589] +++ exited with 0 +++ [pid 7588] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2546, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./855", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./855", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./855/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./855/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./855/cgroup.cpu") = 0 [pid 5028] umount2("./855/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./855/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./855/binderfs") = 0 [pid 5028] umount2("./855/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./855/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./855/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./855/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./855/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./855/file0") = 0 [pid 5028] umount2("./855/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./855/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./855/cgroup") = 0 [pid 5028] umount2("./855/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./855/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./855/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./855") = 0 [pid 5028] mkdir("./856", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7591 attached , child_tidptr=0x5555563a5690) = 2549 [pid 7591] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7591] chdir("./856") = 0 [pid 7591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7591] setpgid(0, 0) = 0 [pid 7591] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7591] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7591] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7591] write(3, "1000", 4) = 4 [pid 7591] close(3) = 0 [pid 7591] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7591] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7591] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7591] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7591] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7591] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7591] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7592 attached => {parent_tid=[2550]}, 88) = 2550 [pid 7592] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7591] rt_sigprocmask(SIG_SETMASK, [], [pid 7592] <... rseq resumed>) = 0 [pid 7592] set_robust_list(0x7feeffcce9a0, 24 [pid 7591] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7592] <... set_robust_list resumed>) = 0 [pid 7591] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7591] <... futex resumed>) = 0 [pid 7592] memfd_create("syzkaller", 0 [pid 7591] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7592] <... memfd_create resumed>) = 3 [pid 7592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7592] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7592] munmap(0x7feef78ae000, 2097152) = 0 [pid 7592] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7592] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7592] close(3) = 0 [pid 7592] mkdir("./file0", 0777) = 0 [pid 7592] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7592] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7592] chdir("./file0") = 0 [pid 7592] ioctl(4, LOOP_CLR_FD) = 0 [pid 7592] close(4) = 0 [pid 7592] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7591] <... futex resumed>) = 0 [pid 7592] <... futex resumed>) = 1 [pid 7591] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7591] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7592] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7592] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7591] <... futex resumed>) = 0 [pid 7592] <... futex resumed>) = 1 [pid 7591] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7592] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7591] <... futex resumed>) = 0 [pid 7592] <... openat resumed>) = 5 [pid 7591] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7592] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7591] <... futex resumed>) = 0 [pid 7591] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7591] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 263.316988][ T7592] loop0: detected capacity change from 0 to 4096 [ 263.326053][ T7592] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.358679][ T7592] ntfs: volume version 3.1. [pid 7592] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7591] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7591] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7591] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7591] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7591] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7593 attached [pid 7593] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7591] <... clone3 resumed> => {parent_tid=[2551]}, 88) = 2551 [pid 7593] <... rseq resumed>) = 0 [pid 7593] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7593] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7591] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7593] <... futex resumed>) = 0 [pid 7591] <... futex resumed>) = 1 [pid 7593] ftruncate(4, 0 [pid 7591] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7593] <... ftruncate resumed>) = 0 [pid 7592] <... write resumed>) = 1048064 [pid 7593] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7592] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7593] <... futex resumed>) = 1 [pid 7593] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7592] <... futex resumed>) = 0 [pid 7592] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7591] <... futex resumed>) = 0 [pid 7591] close(3) = 0 [pid 7591] close(4) = 0 [pid 7591] close(5) = 0 [pid 7591] close(6) = -1 EBADF (Bad file descriptor) [pid 7591] close(7) = -1 EBADF (Bad file descriptor) [pid 7591] close(8) = -1 EBADF (Bad file descriptor) [pid 7591] close(9) = -1 EBADF (Bad file descriptor) [pid 7591] close(10) = -1 EBADF (Bad file descriptor) [pid 7591] close(11) = -1 EBADF (Bad file descriptor) [pid 7591] close(12) = -1 EBADF (Bad file descriptor) [pid 7591] close(13) = -1 EBADF (Bad file descriptor) [pid 7591] close(14) = -1 EBADF (Bad file descriptor) [pid 7591] close(15) = -1 EBADF (Bad file descriptor) [pid 7591] close(16) = -1 EBADF (Bad file descriptor) [pid 7591] close(17) = -1 EBADF (Bad file descriptor) [pid 7591] close(18) = -1 EBADF (Bad file descriptor) [pid 7591] close(19) = -1 EBADF (Bad file descriptor) [pid 7591] close(20) = -1 EBADF (Bad file descriptor) [pid 7591] close(21) = -1 EBADF (Bad file descriptor) [pid 7591] close(22) = -1 EBADF (Bad file descriptor) [pid 7591] close(23) = -1 EBADF (Bad file descriptor) [pid 7591] close(24) = -1 EBADF (Bad file descriptor) [pid 7591] close(25) = -1 EBADF (Bad file descriptor) [pid 7591] close(26) = -1 EBADF (Bad file descriptor) [pid 7591] close(27) = -1 EBADF (Bad file descriptor) [pid 7591] close(28) = -1 EBADF (Bad file descriptor) [pid 7591] close(29) = -1 EBADF (Bad file descriptor) [pid 7591] exit_group(0) = ? [pid 7592] <... futex resumed>) = ? [pid 7593] <... futex resumed>) = ? [pid 7592] +++ exited with 0 +++ [pid 7593] +++ exited with 0 +++ [pid 7591] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2549, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./856", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./856", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./856/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./856/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./856/cgroup.cpu") = 0 [pid 5028] umount2("./856/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./856/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./856/binderfs") = 0 [pid 5028] umount2("./856/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./856/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./856/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./856/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./856/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./856/file0") = 0 [pid 5028] umount2("./856/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./856/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./856/cgroup") = 0 [pid 5028] umount2("./856/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./856/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./856/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./856") = 0 [pid 5028] mkdir("./857", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7594 attached , child_tidptr=0x5555563a5690) = 2552 [pid 7594] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7594] chdir("./857") = 0 [pid 7594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7594] setpgid(0, 0) = 0 [pid 7594] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7594] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7594] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7594] write(3, "1000", 4) = 4 [pid 7594] close(3) = 0 [pid 7594] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7594] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7594] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7594] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7594] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7594] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7595 attached [pid 7595] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7594] <... clone3 resumed> => {parent_tid=[2553]}, 88) = 2553 [pid 7595] set_robust_list(0x7feeffcce9a0, 24 [pid 7594] rt_sigprocmask(SIG_SETMASK, [], [pid 7595] <... set_robust_list resumed>) = 0 [pid 7594] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7594] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7594] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7595] memfd_create("syzkaller", 0) = 3 [pid 7595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7595] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7595] munmap(0x7feef78ae000, 2097152) = 0 [pid 7595] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7595] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7595] close(3) = 0 [pid 7595] mkdir("./file0", 0777) = 0 [pid 7595] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7595] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7595] chdir("./file0") = 0 [pid 7595] ioctl(4, LOOP_CLR_FD) = 0 [pid 7595] close(4) = 0 [pid 7595] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7594] <... futex resumed>) = 0 [pid 7595] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7594] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7595] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7594] <... futex resumed>) = 0 [pid 7594] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7595] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7595] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7594] <... futex resumed>) = 0 [pid 7595] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7594] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7595] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7594] <... futex resumed>) = 0 [pid 7595] <... openat resumed>) = 5 [pid 7594] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7595] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7594] <... futex resumed>) = 0 [pid 7594] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7595] <... futex resumed>) = 1 [pid 7594] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 263.558167][ T7595] loop0: detected capacity change from 0 to 4096 [ 263.567232][ T7595] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.600308][ T7595] ntfs: volume version 3.1. [pid 7595] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7594] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7594] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7594] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7596 attached [pid 7596] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7594] <... clone3 resumed> => {parent_tid=[2554]}, 88) = 2554 [pid 7594] rt_sigprocmask(SIG_SETMASK, [], [pid 7596] set_robust_list(0x7feef7aad9a0, 24 [pid 7594] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7596] <... set_robust_list resumed>) = 0 [pid 7594] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7594] <... futex resumed>) = 0 [pid 7596] ftruncate(4, 0 [pid 7594] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7596] <... ftruncate resumed>) = 0 [pid 7596] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7596] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7594] <... futex resumed>) = 0 [pid 7595] <... write resumed>) = 1048064 [pid 7595] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7595] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7594] close(3) = 0 [pid 7594] close(4) = 0 [pid 7594] close(5) = 0 [pid 7594] close(6) = -1 EBADF (Bad file descriptor) [pid 7594] close(7) = -1 EBADF (Bad file descriptor) [pid 7594] close(8) = -1 EBADF (Bad file descriptor) [pid 7594] close(9) = -1 EBADF (Bad file descriptor) [pid 7594] close(10) = -1 EBADF (Bad file descriptor) [pid 7594] close(11) = -1 EBADF (Bad file descriptor) [pid 7594] close(12) = -1 EBADF (Bad file descriptor) [pid 7594] close(13) = -1 EBADF (Bad file descriptor) [pid 7594] close(14) = -1 EBADF (Bad file descriptor) [pid 7594] close(15) = -1 EBADF (Bad file descriptor) [pid 7594] close(16) = -1 EBADF (Bad file descriptor) [pid 7594] close(17) = -1 EBADF (Bad file descriptor) [pid 7594] close(18) = -1 EBADF (Bad file descriptor) [pid 7594] close(19) = -1 EBADF (Bad file descriptor) [pid 7594] close(20) = -1 EBADF (Bad file descriptor) [pid 7594] close(21) = -1 EBADF (Bad file descriptor) [pid 7594] close(22) = -1 EBADF (Bad file descriptor) [pid 7594] close(23) = -1 EBADF (Bad file descriptor) [pid 7594] close(24) = -1 EBADF (Bad file descriptor) [pid 7594] close(25) = -1 EBADF (Bad file descriptor) [pid 7594] close(26) = -1 EBADF (Bad file descriptor) [pid 7594] close(27) = -1 EBADF (Bad file descriptor) [pid 7594] close(28) = -1 EBADF (Bad file descriptor) [pid 7594] close(29) = -1 EBADF (Bad file descriptor) [pid 7594] exit_group(0) = ? [pid 7595] <... futex resumed>) = ? [pid 7596] <... futex resumed>) = ? [pid 7595] +++ exited with 0 +++ [pid 7596] +++ exited with 0 +++ [pid 7594] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2552, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./857", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./857", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./857/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./857/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./857/cgroup.cpu") = 0 [pid 5028] umount2("./857/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./857/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./857/binderfs") = 0 [pid 5028] umount2("./857/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./857/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./857/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./857/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./857/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./857/file0") = 0 [pid 5028] umount2("./857/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./857/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./857/cgroup") = 0 [pid 5028] umount2("./857/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./857/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./857/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./857") = 0 [pid 5028] mkdir("./858", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2555 ./strace-static-x86_64: Process 7597 attached [pid 7597] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7597] chdir("./858") = 0 [pid 7597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7597] setpgid(0, 0) = 0 [pid 7597] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7597] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7597] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7597] write(3, "1000", 4) = 4 [pid 7597] close(3) = 0 [pid 7597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7597] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7597] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7597] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7598 attached => {parent_tid=[2556]}, 88) = 2556 [pid 7598] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7598] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7598] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7597] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7598] <... futex resumed>) = 0 [pid 7598] memfd_create("syzkaller", 0 [pid 7597] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7598] <... memfd_create resumed>) = 3 [pid 7598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7598] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7598] munmap(0x7feef78ae000, 2097152) = 0 [pid 7598] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7598] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7598] close(3) = 0 [pid 7598] mkdir("./file0", 0777) = 0 [pid 7598] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7598] chdir("./file0") = 0 [pid 7598] ioctl(4, LOOP_CLR_FD) = 0 [pid 7598] close(4) = 0 [pid 7598] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7597] <... futex resumed>) = 0 [pid 7598] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7597] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7597] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7598] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7598] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7597] <... futex resumed>) = 0 [pid 7598] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7597] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7597] <... futex resumed>) = 0 [pid 7598] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7597] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7598] <... openat resumed>) = 5 [pid 7598] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7597] <... futex resumed>) = 0 [pid 7598] <... futex resumed>) = 1 [pid 7597] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7598] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7597] <... futex resumed>) = 0 [ 263.818950][ T7598] loop0: detected capacity change from 0 to 4096 [ 263.827778][ T7598] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 263.860310][ T7598] ntfs: volume version 3.1. [pid 7597] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7597] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7597] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7599 attached [pid 7599] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7597] <... clone3 resumed> => {parent_tid=[2557]}, 88) = 2557 [pid 7597] rt_sigprocmask(SIG_SETMASK, [], [pid 7599] <... rseq resumed>) = 0 [pid 7597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7599] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7597] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7597] <... futex resumed>) = 0 [pid 7597] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7599] ftruncate(4, 0) = 0 [pid 7599] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7598] <... write resumed>) = 1048064 [pid 7599] <... futex resumed>) = 1 [pid 7598] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7597] <... futex resumed>) = 0 [pid 7597] close(3) = 0 [pid 7599] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7598] <... futex resumed>) = 0 [pid 7597] close(4) = 0 [pid 7597] close(5) = 0 [pid 7597] close(6) = -1 EBADF (Bad file descriptor) [pid 7597] close(7) = -1 EBADF (Bad file descriptor) [pid 7598] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7597] close(8) = -1 EBADF (Bad file descriptor) [pid 7597] close(9) = -1 EBADF (Bad file descriptor) [pid 7597] close(10) = -1 EBADF (Bad file descriptor) [pid 7597] close(11) = -1 EBADF (Bad file descriptor) [pid 7597] close(12) = -1 EBADF (Bad file descriptor) [pid 7597] close(13) = -1 EBADF (Bad file descriptor) [pid 7597] close(14) = -1 EBADF (Bad file descriptor) [pid 7597] close(15) = -1 EBADF (Bad file descriptor) [pid 7597] close(16) = -1 EBADF (Bad file descriptor) [pid 7597] close(17) = -1 EBADF (Bad file descriptor) [pid 7597] close(18) = -1 EBADF (Bad file descriptor) [pid 7597] close(19) = -1 EBADF (Bad file descriptor) [pid 7597] close(20) = -1 EBADF (Bad file descriptor) [pid 7597] close(21) = -1 EBADF (Bad file descriptor) [pid 7597] close(22) = -1 EBADF (Bad file descriptor) [pid 7597] close(23) = -1 EBADF (Bad file descriptor) [pid 7597] close(24) = -1 EBADF (Bad file descriptor) [pid 7597] close(25) = -1 EBADF (Bad file descriptor) [pid 7597] close(26) = -1 EBADF (Bad file descriptor) [pid 7597] close(27) = -1 EBADF (Bad file descriptor) [pid 7597] close(28) = -1 EBADF (Bad file descriptor) [pid 7597] close(29) = -1 EBADF (Bad file descriptor) [pid 7597] exit_group(0) = ? [pid 7599] <... futex resumed>) = ? [pid 7598] <... futex resumed>) = ? [pid 7598] +++ exited with 0 +++ [pid 7599] +++ exited with 0 +++ [pid 7597] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2555, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./858", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./858", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./858/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./858/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./858/cgroup.cpu") = 0 [pid 5028] umount2("./858/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./858/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./858/binderfs") = 0 [pid 5028] umount2("./858/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./858/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./858/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./858/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./858/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./858/file0") = 0 [pid 5028] umount2("./858/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./858/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./858/cgroup") = 0 [pid 5028] umount2("./858/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./858/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./858/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./858") = 0 [pid 5028] mkdir("./859", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7600 attached , child_tidptr=0x5555563a5690) = 2558 [pid 7600] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7600] chdir("./859") = 0 [pid 7600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7600] setpgid(0, 0) = 0 [pid 7600] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7600] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7600] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7600] write(3, "1000", 4) = 4 [pid 7600] close(3) = 0 [pid 7600] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7600] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7600] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7600] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7601 attached [pid 7601] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7600] <... clone3 resumed> => {parent_tid=[2559]}, 88) = 2559 [pid 7600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7600] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... rseq resumed>) = 0 [pid 7600] <... futex resumed>) = 0 [pid 7600] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7601] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7601] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7601] memfd_create("syzkaller", 0) = 3 [pid 7601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7601] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7601] munmap(0x7feef78ae000, 2097152) = 0 [pid 7601] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7601] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7601] close(3) = 0 [pid 7601] mkdir("./file0", 0777) = 0 [pid 7601] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7601] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7601] chdir("./file0") = 0 [pid 7601] ioctl(4, LOOP_CLR_FD) = 0 [pid 7601] close(4) = 0 [pid 7601] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7600] <... futex resumed>) = 0 [pid 7601] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7600] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7600] <... futex resumed>) = 0 [pid 7601] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7600] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7601] <... openat resumed>) = 4 [pid 7601] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7600] <... futex resumed>) = 0 [pid 7601] <... futex resumed>) = 1 [pid 7601] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7600] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... futex resumed>) = 0 [pid 7600] <... futex resumed>) = 1 [pid 7601] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7600] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7601] <... openat resumed>) = 5 [pid 7601] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7600] <... futex resumed>) = 0 [pid 7601] <... futex resumed>) = 1 [pid 7600] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7600] <... futex resumed>) = 0 [ 264.076290][ T7601] loop0: detected capacity change from 0 to 4096 [ 264.085720][ T7601] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 264.118499][ T7601] ntfs: volume version 3.1. [pid 7600] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7600] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7600] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7602 attached [pid 7602] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7602] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7602] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7600] <... clone3 resumed> => {parent_tid=[2560]}, 88) = 2560 [pid 7600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7600] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7602] <... futex resumed>) = 0 [pid 7602] ftruncate(4, 0 [pid 7600] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7602] <... ftruncate resumed>) = 0 [pid 7602] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7601] <... write resumed>) = 1048064 [pid 7601] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7600] <... futex resumed>) = 0 [pid 7600] close(3) = 0 [pid 7600] close(4) = 0 [pid 7600] close(5) = 0 [pid 7600] close(6) = -1 EBADF (Bad file descriptor) [pid 7600] close(7 [pid 7602] <... futex resumed>) = 1 [pid 7600] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7602] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7600] close(8) = -1 EBADF (Bad file descriptor) [pid 7600] close(9) = -1 EBADF (Bad file descriptor) [pid 7600] close(10) = -1 EBADF (Bad file descriptor) [pid 7600] close(11) = -1 EBADF (Bad file descriptor) [pid 7600] close(12) = -1 EBADF (Bad file descriptor) [pid 7600] close(13) = -1 EBADF (Bad file descriptor) [pid 7600] close(14) = -1 EBADF (Bad file descriptor) [pid 7600] close(15) = -1 EBADF (Bad file descriptor) [pid 7600] close(16) = -1 EBADF (Bad file descriptor) [pid 7600] close(17) = -1 EBADF (Bad file descriptor) [pid 7600] close(18) = -1 EBADF (Bad file descriptor) [pid 7600] close(19) = -1 EBADF (Bad file descriptor) [pid 7600] close(20) = -1 EBADF (Bad file descriptor) [pid 7600] close(21) = -1 EBADF (Bad file descriptor) [pid 7600] close(22) = -1 EBADF (Bad file descriptor) [pid 7600] close(23) = -1 EBADF (Bad file descriptor) [pid 7600] close(24) = -1 EBADF (Bad file descriptor) [pid 7600] close(25) = -1 EBADF (Bad file descriptor) [pid 7600] close(26) = -1 EBADF (Bad file descriptor) [pid 7600] close(27) = -1 EBADF (Bad file descriptor) [pid 7600] close(28) = -1 EBADF (Bad file descriptor) [pid 7600] close(29) = -1 EBADF (Bad file descriptor) [pid 7600] exit_group(0) = ? [pid 7602] <... futex resumed>) = ? [pid 7602] +++ exited with 0 +++ [pid 7601] <... futex resumed>) = ? [pid 7601] +++ exited with 0 +++ [pid 7600] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2558, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./859", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./859", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./859/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./859/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./859/cgroup.cpu") = 0 [pid 5028] umount2("./859/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./859/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./859/binderfs") = 0 [pid 5028] umount2("./859/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./859/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./859/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./859/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./859/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./859/file0") = 0 [pid 5028] umount2("./859/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./859/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./859/cgroup") = 0 [pid 5028] umount2("./859/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./859/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./859/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./859") = 0 [pid 5028] mkdir("./860", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2561 ./strace-static-x86_64: Process 7603 attached [pid 7603] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7603] chdir("./860") = 0 [pid 7603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7603] setpgid(0, 0) = 0 [pid 7603] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7603] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7603] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7603] write(3, "1000", 4) = 4 [pid 7603] close(3) = 0 [pid 7603] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7603] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7603] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7603] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7603] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7603] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7604 attached => {parent_tid=[2562]}, 88) = 2562 [pid 7603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7603] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7603] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7604] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7604] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7604] memfd_create("syzkaller", 0) = 3 [pid 7604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7604] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7604] munmap(0x7feef78ae000, 2097152) = 0 [pid 7604] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7604] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7604] close(3) = 0 [pid 7604] mkdir("./file0", 0777) = 0 [pid 7604] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7604] chdir("./file0") = 0 [pid 7604] ioctl(4, LOOP_CLR_FD) = 0 [pid 7604] close(4) = 0 [pid 7604] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7603] <... futex resumed>) = 0 [pid 7604] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7603] <... futex resumed>) = 0 [pid 7604] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7603] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7604] <... openat resumed>) = 4 [pid 7604] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7603] <... futex resumed>) = 0 [pid 7604] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7603] <... futex resumed>) = 0 [pid 7604] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7603] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7604] <... openat resumed>) = 5 [pid 7604] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7603] <... futex resumed>) = 0 [pid 7604] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7604] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7604] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7603] <... futex resumed>) = 0 [ 264.326760][ T7604] loop0: detected capacity change from 0 to 4096 [ 264.335646][ T7604] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 264.368645][ T7604] ntfs: volume version 3.1. [pid 7603] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7603] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7603] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7603] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7603] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7605 attached [pid 7605] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7603] <... clone3 resumed> => {parent_tid=[2563]}, 88) = 2563 [pid 7605] <... rseq resumed>) = 0 [pid 7603] rt_sigprocmask(SIG_SETMASK, [], [pid 7605] set_robust_list(0x7feef7aad9a0, 24 [pid 7603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7605] <... set_robust_list resumed>) = 0 [pid 7603] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7605] rt_sigprocmask(SIG_SETMASK, [], [pid 7603] <... futex resumed>) = 0 [pid 7605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7603] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7605] ftruncate(4, 0) = 0 [pid 7605] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7603] <... futex resumed>) = 0 [pid 7605] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7604] <... write resumed>) = 1048064 [pid 7604] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7604] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7603] close(3) = 0 [pid 7603] close(4) = 0 [pid 7603] close(5) = 0 [pid 7603] close(6) = -1 EBADF (Bad file descriptor) [pid 7603] close(7) = -1 EBADF (Bad file descriptor) [pid 7603] close(8) = -1 EBADF (Bad file descriptor) [pid 7603] close(9) = -1 EBADF (Bad file descriptor) [pid 7603] close(10) = -1 EBADF (Bad file descriptor) [pid 7603] close(11) = -1 EBADF (Bad file descriptor) [pid 7603] close(12) = -1 EBADF (Bad file descriptor) [pid 7603] close(13) = -1 EBADF (Bad file descriptor) [pid 7603] close(14) = -1 EBADF (Bad file descriptor) [pid 7603] close(15) = -1 EBADF (Bad file descriptor) [pid 7603] close(16) = -1 EBADF (Bad file descriptor) [pid 7603] close(17) = -1 EBADF (Bad file descriptor) [pid 7603] close(18) = -1 EBADF (Bad file descriptor) [pid 7603] close(19) = -1 EBADF (Bad file descriptor) [pid 7603] close(20) = -1 EBADF (Bad file descriptor) [pid 7603] close(21) = -1 EBADF (Bad file descriptor) [pid 7603] close(22) = -1 EBADF (Bad file descriptor) [pid 7603] close(23) = -1 EBADF (Bad file descriptor) [pid 7603] close(24) = -1 EBADF (Bad file descriptor) [pid 7603] close(25) = -1 EBADF (Bad file descriptor) [pid 7603] close(26) = -1 EBADF (Bad file descriptor) [pid 7603] close(27) = -1 EBADF (Bad file descriptor) [pid 7603] close(28) = -1 EBADF (Bad file descriptor) [pid 7603] close(29) = -1 EBADF (Bad file descriptor) [pid 7603] exit_group(0) = ? [pid 7604] <... futex resumed>) = ? [pid 7605] <... futex resumed>) = ? [pid 7605] +++ exited with 0 +++ [pid 7604] +++ exited with 0 +++ [pid 7603] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2561, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./860", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./860", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./860/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./860/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./860/cgroup.cpu") = 0 [pid 5028] umount2("./860/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./860/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./860/binderfs") = 0 [pid 5028] umount2("./860/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./860/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./860/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./860/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./860/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./860/file0") = 0 [pid 5028] umount2("./860/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./860/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./860/cgroup") = 0 [pid 5028] umount2("./860/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./860/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./860/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./860") = 0 [pid 5028] mkdir("./861", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7606 attached , child_tidptr=0x5555563a5690) = 2564 [pid 7606] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7606] chdir("./861") = 0 [pid 7606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7606] setpgid(0, 0) = 0 [pid 7606] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7606] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7606] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7606] write(3, "1000", 4) = 4 [pid 7606] close(3) = 0 [pid 7606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7606] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7606] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7606] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7607 attached => {parent_tid=[2565]}, 88) = 2565 [pid 7607] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7606] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7606] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7607] <... rseq resumed>) = 0 [pid 7607] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7607] memfd_create("syzkaller", 0) = 3 [pid 7607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7607] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7607] munmap(0x7feef78ae000, 2097152) = 0 [pid 7607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7607] close(3) = 0 [pid 7607] mkdir("./file0", 0777) = 0 [pid 7607] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7607] chdir("./file0") = 0 [pid 7607] ioctl(4, LOOP_CLR_FD) = 0 [pid 7607] close(4) = 0 [pid 7607] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7606] <... futex resumed>) = 0 [pid 7607] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7606] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7606] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] <... openat resumed>) = 4 [pid 7607] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7606] <... futex resumed>) = 0 [pid 7607] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7606] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] <... openat resumed>) = 5 [pid 7606] <... futex resumed>) = 0 [pid 7606] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7607] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7606] <... futex resumed>) = 0 [pid 7607] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7606] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 264.584686][ T7607] loop0: detected capacity change from 0 to 4096 [ 264.594046][ T7607] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 264.627157][ T7607] ntfs: volume version 3.1. [pid 7606] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7606] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7606] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7608 attached [pid 7608] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7606] <... clone3 resumed> => {parent_tid=[2566]}, 88) = 2566 [pid 7608] set_robust_list(0x7feef7aad9a0, 24 [pid 7606] rt_sigprocmask(SIG_SETMASK, [], [pid 7608] <... set_robust_list resumed>) = 0 [pid 7608] rt_sigprocmask(SIG_SETMASK, [], [pid 7606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7606] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7606] <... futex resumed>) = 0 [pid 7608] ftruncate(4, 0 [pid 7606] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7608] <... ftruncate resumed>) = 0 [pid 7608] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7607] <... write resumed>) = 1048064 [pid 7607] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7608] <... futex resumed>) = 1 [pid 7607] <... futex resumed>) = 0 [pid 7606] <... futex resumed>) = 0 [pid 7608] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7606] close(3 [pid 7607] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7606] <... close resumed>) = 0 [pid 7606] close(4) = 0 [pid 7606] close(5) = 0 [pid 7606] close(6) = -1 EBADF (Bad file descriptor) [pid 7606] close(7) = -1 EBADF (Bad file descriptor) [pid 7606] close(8) = -1 EBADF (Bad file descriptor) [pid 7606] close(9) = -1 EBADF (Bad file descriptor) [pid 7606] close(10) = -1 EBADF (Bad file descriptor) [pid 7606] close(11) = -1 EBADF (Bad file descriptor) [pid 7606] close(12) = -1 EBADF (Bad file descriptor) [pid 7606] close(13) = -1 EBADF (Bad file descriptor) [pid 7606] close(14) = -1 EBADF (Bad file descriptor) [pid 7606] close(15) = -1 EBADF (Bad file descriptor) [pid 7606] close(16) = -1 EBADF (Bad file descriptor) [pid 7606] close(17) = -1 EBADF (Bad file descriptor) [pid 7606] close(18) = -1 EBADF (Bad file descriptor) [pid 7606] close(19) = -1 EBADF (Bad file descriptor) [pid 7606] close(20) = -1 EBADF (Bad file descriptor) [pid 7606] close(21) = -1 EBADF (Bad file descriptor) [pid 7606] close(22) = -1 EBADF (Bad file descriptor) [pid 7606] close(23) = -1 EBADF (Bad file descriptor) [pid 7606] close(24) = -1 EBADF (Bad file descriptor) [pid 7606] close(25) = -1 EBADF (Bad file descriptor) [pid 7606] close(26) = -1 EBADF (Bad file descriptor) [pid 7606] close(27) = -1 EBADF (Bad file descriptor) [pid 7606] close(28) = -1 EBADF (Bad file descriptor) [pid 7606] close(29) = -1 EBADF (Bad file descriptor) [pid 7606] exit_group(0) = ? [pid 7608] <... futex resumed>) = ? [pid 7607] <... futex resumed>) = ? [pid 7608] +++ exited with 0 +++ [pid 7607] +++ exited with 0 +++ [pid 7606] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2564, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./861", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./861", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./861/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./861/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./861/cgroup.cpu") = 0 [pid 5028] umount2("./861/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./861/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./861/binderfs") = 0 [pid 5028] umount2("./861/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./861/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./861/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./861/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./861/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./861/file0") = 0 [pid 5028] umount2("./861/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./861/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./861/cgroup") = 0 [pid 5028] umount2("./861/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./861/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./861/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./861") = 0 [pid 5028] mkdir("./862", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7609 attached , child_tidptr=0x5555563a5690) = 2567 [pid 7609] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7609] chdir("./862") = 0 [pid 7609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7609] setpgid(0, 0) = 0 [pid 7609] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7609] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7609] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7609] write(3, "1000", 4) = 4 [pid 7609] close(3) = 0 [pid 7609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7609] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7609] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7609] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7610 attached => {parent_tid=[2568]}, 88) = 2568 [pid 7610] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7610] set_robust_list(0x7feeffcce9a0, 24 [pid 7609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7609] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7610] <... set_robust_list resumed>) = 0 [pid 7610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7609] <... futex resumed>) = 0 [pid 7610] memfd_create("syzkaller", 0) = 3 [pid 7610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7609] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7610] <... mmap resumed>) = 0x7feef78ae000 [pid 7610] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7610] munmap(0x7feef78ae000, 2097152) = 0 [pid 7610] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7610] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7610] close(3) = 0 [pid 7610] mkdir("./file0", 0777) = 0 [pid 7610] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7610] chdir("./file0") = 0 [pid 7610] ioctl(4, LOOP_CLR_FD) = 0 [pid 7610] close(4) = 0 [pid 7610] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7609] <... futex resumed>) = 0 [pid 7610] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7609] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7609] <... futex resumed>) = 0 [pid 7610] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7609] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7610] <... openat resumed>) = 4 [pid 7610] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7609] <... futex resumed>) = 0 [pid 7610] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7609] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7610] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7609] <... futex resumed>) = 0 [pid 7610] <... openat resumed>) = 5 [pid 7609] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7610] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7610] <... futex resumed>) = 0 [pid 7609] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7610] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7609] <... futex resumed>) = 0 [ 264.847442][ T7610] loop0: detected capacity change from 0 to 4096 [ 264.868445][ T7610] ntfs: volume version 3.1. [pid 7609] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7609] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7609] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7611 attached => {parent_tid=[2569]}, 88) = 2569 [pid 7611] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7609] rt_sigprocmask(SIG_SETMASK, [], [pid 7611] <... rseq resumed>) = 0 [pid 7609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7611] set_robust_list(0x7feef7aad9a0, 24 [pid 7609] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7609] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7611] <... set_robust_list resumed>) = 0 [pid 7611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7611] ftruncate(4, 0) = 0 [pid 7611] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7610] <... write resumed>) = 1048064 [pid 7609] <... futex resumed>) = 0 [pid 7611] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7610] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7610] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7609] close(3) = 0 [pid 7609] close(4) = 0 [pid 7609] close(5) = 0 [pid 7609] close(6) = -1 EBADF (Bad file descriptor) [pid 7609] close(7) = -1 EBADF (Bad file descriptor) [pid 7609] close(8) = -1 EBADF (Bad file descriptor) [pid 7609] close(9) = -1 EBADF (Bad file descriptor) [pid 7609] close(10) = -1 EBADF (Bad file descriptor) [pid 7609] close(11) = -1 EBADF (Bad file descriptor) [pid 7609] close(12) = -1 EBADF (Bad file descriptor) [pid 7609] close(13) = -1 EBADF (Bad file descriptor) [pid 7609] close(14) = -1 EBADF (Bad file descriptor) [pid 7609] close(15) = -1 EBADF (Bad file descriptor) [pid 7609] close(16) = -1 EBADF (Bad file descriptor) [pid 7609] close(17) = -1 EBADF (Bad file descriptor) [pid 7609] close(18) = -1 EBADF (Bad file descriptor) [pid 7609] close(19) = -1 EBADF (Bad file descriptor) [pid 7609] close(20) = -1 EBADF (Bad file descriptor) [pid 7609] close(21) = -1 EBADF (Bad file descriptor) [pid 7609] close(22) = -1 EBADF (Bad file descriptor) [pid 7609] close(23) = -1 EBADF (Bad file descriptor) [pid 7609] close(24) = -1 EBADF (Bad file descriptor) [pid 7609] close(25) = -1 EBADF (Bad file descriptor) [pid 7609] close(26) = -1 EBADF (Bad file descriptor) [pid 7609] close(27) = -1 EBADF (Bad file descriptor) [pid 7609] close(28) = -1 EBADF (Bad file descriptor) [pid 7609] close(29) = -1 EBADF (Bad file descriptor) [pid 7609] exit_group(0 [pid 7611] <... futex resumed>) = ? [pid 7610] <... futex resumed>) = ? [pid 7609] <... exit_group resumed>) = ? [pid 7611] +++ exited with 0 +++ [pid 7610] +++ exited with 0 +++ [pid 7609] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2567, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./862", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./862", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./862/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./862/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./862/cgroup.cpu") = 0 [pid 5028] umount2("./862/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./862/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./862/binderfs") = 0 [pid 5028] umount2("./862/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./862/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./862/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./862/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./862/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./862/file0") = 0 [pid 5028] umount2("./862/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./862/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./862/cgroup") = 0 [pid 5028] umount2("./862/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./862/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./862/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./862") = 0 [pid 5028] mkdir("./863", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7612 attached , child_tidptr=0x5555563a5690) = 2570 [pid 7612] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7612] chdir("./863") = 0 [pid 7612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7612] setpgid(0, 0) = 0 [pid 7612] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7612] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7612] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7612] write(3, "1000", 4) = 4 [pid 7612] close(3) = 0 [pid 7612] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7612] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7612] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7612] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2571]}, 88) = 2571 [pid 7612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7612] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7612] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7613 attached [pid 7613] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7613] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7613] memfd_create("syzkaller", 0) = 3 [pid 7613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7613] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7613] munmap(0x7feef78ae000, 2097152) = 0 [pid 7613] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7613] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7613] close(3) = 0 [pid 7613] mkdir("./file0", 0777) = 0 [pid 7613] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7613] chdir("./file0") = 0 [pid 7613] ioctl(4, LOOP_CLR_FD) = 0 [pid 7613] close(4) = 0 [pid 7613] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7612] <... futex resumed>) = 0 [pid 7613] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7612] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7612] <... futex resumed>) = 0 [pid 7613] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7612] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7613] <... openat resumed>) = 4 [pid 7613] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7612] <... futex resumed>) = 0 [pid 7613] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7612] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7612] <... futex resumed>) = 0 [pid 7613] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7612] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7613] <... openat resumed>) = 5 [pid 7613] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7612] <... futex resumed>) = 0 [pid 7612] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7613] <... futex resumed>) = 1 [pid 7612] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 265.053723][ T7613] loop0: detected capacity change from 0 to 4096 [ 265.076547][ T7613] ntfs: volume version 3.1. [pid 7613] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7612] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7612] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2572]}, 88) = 2572 [pid 7612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7614 attached [pid 7614] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7614] set_robust_list(0x7feef7aad9a0, 24 [pid 7612] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7612] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7614] <... set_robust_list resumed>) = 0 [pid 7614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7614] ftruncate(4, 0) = 0 [pid 7613] <... write resumed>) = 1048064 [pid 7614] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7613] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7612] <... futex resumed>) = 0 [pid 7614] <... futex resumed>) = 1 [pid 7613] <... futex resumed>) = 0 [pid 7612] close(3 [pid 7614] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7613] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7612] <... close resumed>) = 0 [pid 7612] close(4) = 0 [pid 7612] close(5) = 0 [pid 7612] close(6) = -1 EBADF (Bad file descriptor) [pid 7612] close(7) = -1 EBADF (Bad file descriptor) [pid 7612] close(8) = -1 EBADF (Bad file descriptor) [pid 7612] close(9) = -1 EBADF (Bad file descriptor) [pid 7612] close(10) = -1 EBADF (Bad file descriptor) [pid 7612] close(11) = -1 EBADF (Bad file descriptor) [pid 7612] close(12) = -1 EBADF (Bad file descriptor) [pid 7612] close(13) = -1 EBADF (Bad file descriptor) [pid 7612] close(14) = -1 EBADF (Bad file descriptor) [pid 7612] close(15) = -1 EBADF (Bad file descriptor) [pid 7612] close(16) = -1 EBADF (Bad file descriptor) [pid 7612] close(17) = -1 EBADF (Bad file descriptor) [pid 7612] close(18) = -1 EBADF (Bad file descriptor) [pid 7612] close(19) = -1 EBADF (Bad file descriptor) [pid 7612] close(20) = -1 EBADF (Bad file descriptor) [pid 7612] close(21) = -1 EBADF (Bad file descriptor) [pid 7612] close(22) = -1 EBADF (Bad file descriptor) [pid 7612] close(23) = -1 EBADF (Bad file descriptor) [pid 7612] close(24) = -1 EBADF (Bad file descriptor) [pid 7612] close(25) = -1 EBADF (Bad file descriptor) [pid 7612] close(26) = -1 EBADF (Bad file descriptor) [pid 7612] close(27) = -1 EBADF (Bad file descriptor) [pid 7612] close(28) = -1 EBADF (Bad file descriptor) [pid 7612] close(29) = -1 EBADF (Bad file descriptor) [pid 7612] exit_group(0 [pid 7614] <... futex resumed>) = ? [pid 7613] <... futex resumed>) = ? [pid 7614] +++ exited with 0 +++ [pid 7612] <... exit_group resumed>) = ? [pid 7613] +++ exited with 0 +++ [pid 7612] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2570, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./863", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./863", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./863/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./863/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./863/cgroup.cpu") = 0 [pid 5028] umount2("./863/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./863/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./863/binderfs") = 0 [pid 5028] umount2("./863/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./863/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./863/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./863/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./863/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./863/file0") = 0 [pid 5028] umount2("./863/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./863/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./863/cgroup") = 0 [pid 5028] umount2("./863/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./863/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./863/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./863") = 0 [pid 5028] mkdir("./864", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2573 ./strace-static-x86_64: Process 7615 attached [pid 7615] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7615] chdir("./864") = 0 [pid 7615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7615] setpgid(0, 0) = 0 [pid 7615] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7615] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7615] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7615] write(3, "1000", 4) = 4 [pid 7615] close(3) = 0 [pid 7615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7615] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7615] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7615] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7615] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7615] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7616 attached => {parent_tid=[2574]}, 88) = 2574 [pid 7615] rt_sigprocmask(SIG_SETMASK, [], [pid 7616] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7616] <... rseq resumed>) = 0 [pid 7615] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7616] set_robust_list(0x7feeffcce9a0, 24 [pid 7615] <... futex resumed>) = 0 [pid 7616] <... set_robust_list resumed>) = 0 [pid 7615] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7616] memfd_create("syzkaller", 0) = 3 [pid 7616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7616] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7616] munmap(0x7feef78ae000, 2097152) = 0 [pid 7616] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7616] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7616] close(3) = 0 [pid 7616] mkdir("./file0", 0777) = 0 [pid 7616] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7616] chdir("./file0") = 0 [pid 7616] ioctl(4, LOOP_CLR_FD) = 0 [pid 7616] close(4) = 0 [pid 7616] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7616] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7615] <... futex resumed>) = 0 [pid 7615] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7616] <... futex resumed>) = 0 [pid 7615] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7616] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7616] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7615] <... futex resumed>) = 0 [pid 7615] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7616] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7615] <... futex resumed>) = 0 [pid 7615] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7616] <... openat resumed>) = 5 [pid 7616] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7615] <... futex resumed>) = 0 [pid 7615] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7615] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 265.309025][ T7616] loop0: detected capacity change from 0 to 4096 [ 265.329903][ T7616] ntfs: volume version 3.1. [pid 7616] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7615] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7615] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7615] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7615] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7617 attached [pid 7617] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7615] <... clone3 resumed> => {parent_tid=[2575]}, 88) = 2575 [pid 7617] <... rseq resumed>) = 0 [pid 7615] rt_sigprocmask(SIG_SETMASK, [], [pid 7617] set_robust_list(0x7feef7aad9a0, 24 [pid 7615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7617] <... set_robust_list resumed>) = 0 [pid 7615] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7617] rt_sigprocmask(SIG_SETMASK, [], [pid 7615] <... futex resumed>) = 0 [pid 7617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7615] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7617] ftruncate(4, 0) = 0 [pid 7617] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7616] <... write resumed>) = 1048064 [pid 7617] <... futex resumed>) = 1 [pid 7615] <... futex resumed>) = 0 [pid 7617] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7616] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7615] close(3 [pid 7616] <... futex resumed>) = 0 [pid 7615] <... close resumed>) = 0 [pid 7616] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7615] close(4) = 0 [pid 7615] close(5) = 0 [pid 7615] close(6) = -1 EBADF (Bad file descriptor) [pid 7615] close(7) = -1 EBADF (Bad file descriptor) [pid 7615] close(8) = -1 EBADF (Bad file descriptor) [pid 7615] close(9) = -1 EBADF (Bad file descriptor) [pid 7615] close(10) = -1 EBADF (Bad file descriptor) [pid 7615] close(11) = -1 EBADF (Bad file descriptor) [pid 7615] close(12) = -1 EBADF (Bad file descriptor) [pid 7615] close(13) = -1 EBADF (Bad file descriptor) [pid 7615] close(14) = -1 EBADF (Bad file descriptor) [pid 7615] close(15) = -1 EBADF (Bad file descriptor) [pid 7615] close(16) = -1 EBADF (Bad file descriptor) [pid 7615] close(17) = -1 EBADF (Bad file descriptor) [pid 7615] close(18) = -1 EBADF (Bad file descriptor) [pid 7615] close(19) = -1 EBADF (Bad file descriptor) [pid 7615] close(20) = -1 EBADF (Bad file descriptor) [pid 7615] close(21) = -1 EBADF (Bad file descriptor) [pid 7615] close(22) = -1 EBADF (Bad file descriptor) [pid 7615] close(23) = -1 EBADF (Bad file descriptor) [pid 7615] close(24) = -1 EBADF (Bad file descriptor) [pid 7615] close(25) = -1 EBADF (Bad file descriptor) [pid 7615] close(26) = -1 EBADF (Bad file descriptor) [pid 7615] close(27) = -1 EBADF (Bad file descriptor) [pid 7615] close(28) = -1 EBADF (Bad file descriptor) [pid 7615] close(29) = -1 EBADF (Bad file descriptor) [pid 7615] exit_group(0) = ? [pid 7616] <... futex resumed>) = ? [pid 7617] <... futex resumed>) = ? [pid 7617] +++ exited with 0 +++ [pid 7616] +++ exited with 0 +++ [pid 7615] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2573, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./864", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./864", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./864/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./864/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./864/cgroup.cpu") = 0 [pid 5028] umount2("./864/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./864/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./864/binderfs") = 0 [pid 5028] umount2("./864/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./864/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./864/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./864/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./864/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./864/file0") = 0 [pid 5028] umount2("./864/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./864/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./864/cgroup") = 0 [pid 5028] umount2("./864/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./864/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./864/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./864") = 0 [pid 5028] mkdir("./865", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7618 attached [pid 7618] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2576 [pid 7618] <... set_robust_list resumed>) = 0 [pid 7618] chdir("./865") = 0 [pid 7618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7618] setpgid(0, 0) = 0 [pid 7618] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7618] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7618] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7618] write(3, "1000", 4) = 4 [pid 7618] close(3) = 0 [pid 7618] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7618] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7618] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7618] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7618] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7618] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7618] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2577]}, 88) = 2577 [pid 7618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7618] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7618] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7619 attached [pid 7619] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7619] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7619] memfd_create("syzkaller", 0) = 3 [pid 7619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7619] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7619] munmap(0x7feef78ae000, 2097152) = 0 [pid 7619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7619] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7619] close(3) = 0 [pid 7619] mkdir("./file0", 0777) = 0 [pid 7619] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7619] chdir("./file0") = 0 [pid 7619] ioctl(4, LOOP_CLR_FD) = 0 [pid 7619] close(4) = 0 [pid 7619] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7618] <... futex resumed>) = 0 [pid 7619] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7618] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7618] <... futex resumed>) = 0 [pid 7618] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7619] <... openat resumed>) = 4 [pid 7619] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7618] <... futex resumed>) = 0 [pid 7619] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7618] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7618] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7619] <... futex resumed>) = 0 [pid 7619] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7619] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7618] <... futex resumed>) = 0 [pid 7619] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7618] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7618] <... futex resumed>) = 0 [pid 7619] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 265.556529][ T7619] loop0: detected capacity change from 0 to 4096 [ 265.578420][ T7619] ntfs: volume version 3.1. [pid 7618] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7618] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7618] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7618] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7618] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7618] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7620 attached [pid 7620] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7620] set_robust_list(0x7feef7aad9a0, 24 [pid 7618] <... clone3 resumed> => {parent_tid=[2578]}, 88) = 2578 [pid 7620] <... set_robust_list resumed>) = 0 [pid 7618] rt_sigprocmask(SIG_SETMASK, [], [pid 7620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7618] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7620] ftruncate(4, 0 [pid 7618] <... futex resumed>) = 0 [pid 7618] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7620] <... ftruncate resumed>) = 0 [pid 7619] <... write resumed>) = 1048064 [pid 7620] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7619] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7620] <... futex resumed>) = 1 [pid 7619] <... futex resumed>) = 0 [pid 7620] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7619] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7618] <... futex resumed>) = 0 [pid 7618] close(3) = 0 [pid 7618] close(4) = 0 [pid 7618] close(5) = 0 [pid 7618] close(6) = -1 EBADF (Bad file descriptor) [pid 7618] close(7) = -1 EBADF (Bad file descriptor) [pid 7618] close(8) = -1 EBADF (Bad file descriptor) [pid 7618] close(9) = -1 EBADF (Bad file descriptor) [pid 7618] close(10) = -1 EBADF (Bad file descriptor) [pid 7618] close(11) = -1 EBADF (Bad file descriptor) [pid 7618] close(12) = -1 EBADF (Bad file descriptor) [pid 7618] close(13) = -1 EBADF (Bad file descriptor) [pid 7618] close(14) = -1 EBADF (Bad file descriptor) [pid 7618] close(15) = -1 EBADF (Bad file descriptor) [pid 7618] close(16) = -1 EBADF (Bad file descriptor) [pid 7618] close(17) = -1 EBADF (Bad file descriptor) [pid 7618] close(18) = -1 EBADF (Bad file descriptor) [pid 7618] close(19) = -1 EBADF (Bad file descriptor) [pid 7618] close(20) = -1 EBADF (Bad file descriptor) [pid 7618] close(21) = -1 EBADF (Bad file descriptor) [pid 7618] close(22) = -1 EBADF (Bad file descriptor) [pid 7618] close(23) = -1 EBADF (Bad file descriptor) [pid 7618] close(24) = -1 EBADF (Bad file descriptor) [pid 7618] close(25) = -1 EBADF (Bad file descriptor) [pid 7618] close(26) = -1 EBADF (Bad file descriptor) [pid 7618] close(27) = -1 EBADF (Bad file descriptor) [pid 7618] close(28) = -1 EBADF (Bad file descriptor) [pid 7618] close(29) = -1 EBADF (Bad file descriptor) [pid 7618] exit_group(0 [pid 7619] <... futex resumed>) = ? [pid 7620] <... futex resumed>) = ? [pid 7618] <... exit_group resumed>) = ? [pid 7619] +++ exited with 0 +++ [pid 7620] +++ exited with 0 +++ [pid 7618] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2576, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./865", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./865", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./865/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./865/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./865/cgroup.cpu") = 0 [pid 5028] umount2("./865/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./865/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./865/binderfs") = 0 [pid 5028] umount2("./865/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./865/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./865/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./865/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./865/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./865/file0") = 0 [pid 5028] umount2("./865/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./865/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./865/cgroup") = 0 [pid 5028] umount2("./865/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./865/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./865/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./865") = 0 [pid 5028] mkdir("./866", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2579 ./strace-static-x86_64: Process 7621 attached [pid 7621] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7621] chdir("./866") = 0 [pid 7621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7621] setpgid(0, 0) = 0 [pid 7621] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7621] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7621] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7621] write(3, "1000", 4) = 4 [pid 7621] close(3) = 0 [pid 7621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7621] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7621] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7621] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7621] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7621] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7621] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7622 attached [pid 7622] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7622] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7622] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7621] <... clone3 resumed> => {parent_tid=[2580]}, 88) = 2580 [pid 7621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7621] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7622] <... futex resumed>) = 0 [pid 7621] <... futex resumed>) = 1 [pid 7622] memfd_create("syzkaller", 0 [pid 7621] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7622] <... memfd_create resumed>) = 3 [pid 7622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7622] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7622] munmap(0x7feef78ae000, 2097152) = 0 [pid 7622] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7622] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7622] close(3) = 0 [pid 7622] mkdir("./file0", 0777) = 0 [pid 7622] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7622] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7622] chdir("./file0") = 0 [pid 7622] ioctl(4, LOOP_CLR_FD) = 0 [pid 7622] close(4) = 0 [pid 7622] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7621] <... futex resumed>) = 0 [pid 7621] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7622] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7621] <... futex resumed>) = 0 [pid 7621] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7622] <... openat resumed>) = 4 [pid 7622] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7621] <... futex resumed>) = 0 [pid 7621] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7621] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7622] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7622] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7621] <... futex resumed>) = 0 [pid 7621] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7622] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7621] <... futex resumed>) = 0 [ 265.788685][ T7622] loop0: detected capacity change from 0 to 4096 [ 265.811494][ T7622] ntfs: volume version 3.1. [pid 7621] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7621] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7621] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7621] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7621] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7621] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7623 attached [pid 7623] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7621] <... clone3 resumed> => {parent_tid=[2581]}, 88) = 2581 [pid 7623] <... rseq resumed>) = 0 [pid 7621] rt_sigprocmask(SIG_SETMASK, [], [pid 7623] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7621] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7623] rt_sigprocmask(SIG_SETMASK, [], [pid 7621] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7623] ftruncate(4, 0 [pid 7621] <... futex resumed>) = 0 [pid 7621] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7623] <... ftruncate resumed>) = 0 [pid 7622] <... write resumed>) = 1048064 [pid 7623] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7622] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7622] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7623] <... futex resumed>) = 1 [pid 7621] <... futex resumed>) = 0 [pid 7623] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7621] close(3) = 0 [pid 7621] close(4) = 0 [pid 7621] close(5) = 0 [pid 7621] close(6) = -1 EBADF (Bad file descriptor) [pid 7621] close(7) = -1 EBADF (Bad file descriptor) [pid 7621] close(8) = -1 EBADF (Bad file descriptor) [pid 7621] close(9) = -1 EBADF (Bad file descriptor) [pid 7621] close(10) = -1 EBADF (Bad file descriptor) [pid 7621] close(11) = -1 EBADF (Bad file descriptor) [pid 7621] close(12) = -1 EBADF (Bad file descriptor) [pid 7621] close(13) = -1 EBADF (Bad file descriptor) [pid 7621] close(14) = -1 EBADF (Bad file descriptor) [pid 7621] close(15) = -1 EBADF (Bad file descriptor) [pid 7621] close(16) = -1 EBADF (Bad file descriptor) [pid 7621] close(17) = -1 EBADF (Bad file descriptor) [pid 7621] close(18) = -1 EBADF (Bad file descriptor) [pid 7621] close(19) = -1 EBADF (Bad file descriptor) [pid 7621] close(20) = -1 EBADF (Bad file descriptor) [pid 7621] close(21) = -1 EBADF (Bad file descriptor) [pid 7621] close(22) = -1 EBADF (Bad file descriptor) [pid 7621] close(23) = -1 EBADF (Bad file descriptor) [pid 7621] close(24) = -1 EBADF (Bad file descriptor) [pid 7621] close(25) = -1 EBADF (Bad file descriptor) [pid 7621] close(26) = -1 EBADF (Bad file descriptor) [pid 7621] close(27) = -1 EBADF (Bad file descriptor) [pid 7621] close(28) = -1 EBADF (Bad file descriptor) [pid 7621] close(29) = -1 EBADF (Bad file descriptor) [pid 7621] exit_group(0) = ? [pid 7622] <... futex resumed>) = ? [pid 7623] <... futex resumed>) = ? [pid 7622] +++ exited with 0 +++ [pid 7623] +++ exited with 0 +++ [pid 7621] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2579, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./866", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./866", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./866/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./866/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./866/cgroup.cpu") = 0 [pid 5028] umount2("./866/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./866/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./866/binderfs") = 0 [pid 5028] umount2("./866/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./866/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./866/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./866/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./866/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./866/file0") = 0 [pid 5028] umount2("./866/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./866/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./866/cgroup") = 0 [pid 5028] umount2("./866/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./866/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./866/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./866") = 0 [pid 5028] mkdir("./867", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2582 ./strace-static-x86_64: Process 7624 attached [pid 7624] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7624] chdir("./867") = 0 [pid 7624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7624] setpgid(0, 0) = 0 [pid 7624] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7624] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7624] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7624] write(3, "1000", 4) = 4 [pid 7624] close(3) = 0 [pid 7624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7624] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7624] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7624] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7625 attached [pid 7625] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7624] <... clone3 resumed> => {parent_tid=[2583]}, 88) = 2583 [pid 7625] <... rseq resumed>) = 0 [pid 7624] rt_sigprocmask(SIG_SETMASK, [], [pid 7625] set_robust_list(0x7feeffcce9a0, 24 [pid 7624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7625] <... set_robust_list resumed>) = 0 [pid 7624] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7624] <... futex resumed>) = 0 [pid 7624] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7625] memfd_create("syzkaller", 0) = 3 [pid 7625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7625] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7625] munmap(0x7feef78ae000, 2097152) = 0 [pid 7625] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7625] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7625] close(3) = 0 [pid 7625] mkdir("./file0", 0777) = 0 [pid 7625] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7625] chdir("./file0") = 0 [pid 7625] ioctl(4, LOOP_CLR_FD) = 0 [pid 7625] close(4) = 0 [pid 7625] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7624] <... futex resumed>) = 0 [pid 7625] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] <... futex resumed>) = 0 [pid 7624] <... futex resumed>) = 1 [pid 7625] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7624] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7625] <... openat resumed>) = 4 [pid 7625] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7624] <... futex resumed>) = 0 [pid 7625] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7624] <... futex resumed>) = 0 [pid 7625] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7624] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7625] <... openat resumed>) = 5 [pid 7625] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7624] <... futex resumed>) = 0 [pid 7624] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7625] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 266.028891][ T7625] loop0: detected capacity change from 0 to 4096 [ 266.050028][ T7625] ntfs: volume version 3.1. [pid 7624] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7624] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7624] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7626 attached [pid 7626] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7624] <... clone3 resumed> => {parent_tid=[2584]}, 88) = 2584 [pid 7626] <... rseq resumed>) = 0 [pid 7626] set_robust_list(0x7feef7aad9a0, 24 [pid 7624] rt_sigprocmask(SIG_SETMASK, [], [pid 7626] <... set_robust_list resumed>) = 0 [pid 7624] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7626] rt_sigprocmask(SIG_SETMASK, [], [pid 7624] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7624] <... futex resumed>) = 0 [pid 7626] ftruncate(4, 0 [pid 7624] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7626] <... ftruncate resumed>) = 0 [pid 7625] <... write resumed>) = 1048064 [pid 7626] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7625] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7626] <... futex resumed>) = 1 [pid 7625] <... futex resumed>) = 0 [pid 7624] <... futex resumed>) = 0 [pid 7624] close(3 [pid 7626] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] <... close resumed>) = 0 [pid 7625] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7624] close(4) = 0 [pid 7624] close(5) = 0 [pid 7624] close(6) = -1 EBADF (Bad file descriptor) [pid 7624] close(7) = -1 EBADF (Bad file descriptor) [pid 7624] close(8) = -1 EBADF (Bad file descriptor) [pid 7624] close(9) = -1 EBADF (Bad file descriptor) [pid 7624] close(10) = -1 EBADF (Bad file descriptor) [pid 7624] close(11) = -1 EBADF (Bad file descriptor) [pid 7624] close(12) = -1 EBADF (Bad file descriptor) [pid 7624] close(13) = -1 EBADF (Bad file descriptor) [pid 7624] close(14) = -1 EBADF (Bad file descriptor) [pid 7624] close(15) = -1 EBADF (Bad file descriptor) [pid 7624] close(16) = -1 EBADF (Bad file descriptor) [pid 7624] close(17) = -1 EBADF (Bad file descriptor) [pid 7624] close(18) = -1 EBADF (Bad file descriptor) [pid 7624] close(19) = -1 EBADF (Bad file descriptor) [pid 7624] close(20) = -1 EBADF (Bad file descriptor) [pid 7624] close(21) = -1 EBADF (Bad file descriptor) [pid 7624] close(22) = -1 EBADF (Bad file descriptor) [pid 7624] close(23) = -1 EBADF (Bad file descriptor) [pid 7624] close(24) = -1 EBADF (Bad file descriptor) [pid 7624] close(25) = -1 EBADF (Bad file descriptor) [pid 7624] close(26) = -1 EBADF (Bad file descriptor) [pid 7624] close(27) = -1 EBADF (Bad file descriptor) [pid 7624] close(28) = -1 EBADF (Bad file descriptor) [pid 7624] close(29) = -1 EBADF (Bad file descriptor) [pid 7624] exit_group(0) = ? [pid 7625] <... futex resumed>) = ? [pid 7626] <... futex resumed>) = ? [pid 7626] +++ exited with 0 +++ [pid 7625] +++ exited with 0 +++ [pid 7624] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2582, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./867", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./867", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./867/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./867/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./867/cgroup.cpu") = 0 [pid 5028] umount2("./867/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./867/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./867/binderfs") = 0 [pid 5028] umount2("./867/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./867/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./867/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./867/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./867/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./867/file0") = 0 [pid 5028] umount2("./867/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./867/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./867/cgroup") = 0 [pid 5028] umount2("./867/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./867/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./867/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./867") = 0 [pid 5028] mkdir("./868", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2585 ./strace-static-x86_64: Process 7627 attached [pid 7627] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7627] chdir("./868") = 0 [pid 7627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7627] setpgid(0, 0) = 0 [pid 7627] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7627] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7627] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7627] write(3, "1000", 4) = 4 [pid 7627] close(3) = 0 [pid 7627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7627] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7627] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7627] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7628 attached [pid 7628] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7627] <... clone3 resumed> => {parent_tid=[2586]}, 88) = 2586 [pid 7628] <... rseq resumed>) = 0 [pid 7627] rt_sigprocmask(SIG_SETMASK, [], [pid 7628] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7627] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7628] rt_sigprocmask(SIG_SETMASK, [], [pid 7627] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7628] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7627] <... futex resumed>) = 0 [pid 7627] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7628] memfd_create("syzkaller", 0) = 3 [pid 7628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7628] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7628] munmap(0x7feef78ae000, 2097152) = 0 [pid 7628] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7628] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7628] close(3) = 0 [pid 7628] mkdir("./file0", 0777) = 0 [pid 7628] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7628] chdir("./file0") = 0 [pid 7628] ioctl(4, LOOP_CLR_FD) = 0 [pid 7628] close(4) = 0 [pid 7628] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7628] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7627] <... futex resumed>) = 0 [pid 7627] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7628] <... futex resumed>) = 0 [pid 7628] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7627] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7628] <... openat resumed>) = 4 [pid 7628] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7627] <... futex resumed>) = 0 [pid 7628] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7627] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7627] <... futex resumed>) = 0 [pid 7628] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7627] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7628] <... openat resumed>) = 5 [pid 7628] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7627] <... futex resumed>) = 0 [pid 7628] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7627] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7627] <... futex resumed>) = 0 [pid 7628] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 266.249030][ T7628] loop0: detected capacity change from 0 to 4096 [ 266.270702][ T7628] ntfs: volume version 3.1. [pid 7627] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7627] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7627] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7629 attached => {parent_tid=[2587]}, 88) = 2587 [pid 7629] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7627] rt_sigprocmask(SIG_SETMASK, [], [pid 7629] <... rseq resumed>) = 0 [pid 7627] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7629] set_robust_list(0x7feef7aad9a0, 24 [pid 7627] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7629] <... set_robust_list resumed>) = 0 [pid 7629] rt_sigprocmask(SIG_SETMASK, [], [pid 7627] <... futex resumed>) = 0 [pid 7627] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7629] ftruncate(4, 0) = 0 [pid 7628] <... write resumed>) = 1048064 [pid 7628] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7628] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7629] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7627] <... futex resumed>) = 0 [pid 7629] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7627] close(3) = 0 [pid 7627] close(4) = 0 [pid 7627] close(5) = 0 [pid 7627] close(6) = -1 EBADF (Bad file descriptor) [pid 7627] close(7) = -1 EBADF (Bad file descriptor) [pid 7627] close(8) = -1 EBADF (Bad file descriptor) [pid 7627] close(9) = -1 EBADF (Bad file descriptor) [pid 7627] close(10) = -1 EBADF (Bad file descriptor) [pid 7627] close(11) = -1 EBADF (Bad file descriptor) [pid 7627] close(12) = -1 EBADF (Bad file descriptor) [pid 7627] close(13) = -1 EBADF (Bad file descriptor) [pid 7627] close(14) = -1 EBADF (Bad file descriptor) [pid 7627] close(15) = -1 EBADF (Bad file descriptor) [pid 7627] close(16) = -1 EBADF (Bad file descriptor) [pid 7627] close(17) = -1 EBADF (Bad file descriptor) [pid 7627] close(18) = -1 EBADF (Bad file descriptor) [pid 7627] close(19) = -1 EBADF (Bad file descriptor) [pid 7627] close(20) = -1 EBADF (Bad file descriptor) [pid 7627] close(21) = -1 EBADF (Bad file descriptor) [pid 7627] close(22) = -1 EBADF (Bad file descriptor) [pid 7627] close(23) = -1 EBADF (Bad file descriptor) [pid 7627] close(24) = -1 EBADF (Bad file descriptor) [pid 7627] close(25) = -1 EBADF (Bad file descriptor) [pid 7627] close(26) = -1 EBADF (Bad file descriptor) [pid 7627] close(27) = -1 EBADF (Bad file descriptor) [pid 7627] close(28) = -1 EBADF (Bad file descriptor) [pid 7627] close(29) = -1 EBADF (Bad file descriptor) [pid 7627] exit_group(0) = ? [pid 7628] <... futex resumed>) = ? [pid 7629] <... futex resumed>) = ? [pid 7628] +++ exited with 0 +++ [pid 7629] +++ exited with 0 +++ [pid 7627] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2585, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./868", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./868", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./868/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./868/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./868/cgroup.cpu") = 0 [pid 5028] umount2("./868/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./868/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./868/binderfs") = 0 [pid 5028] umount2("./868/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./868/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./868/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./868/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./868/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./868/file0") = 0 [pid 5028] umount2("./868/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./868/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./868/cgroup") = 0 [pid 5028] umount2("./868/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./868/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./868/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./868") = 0 [pid 5028] mkdir("./869", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7630 attached , child_tidptr=0x5555563a5690) = 2588 [pid 7630] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7630] chdir("./869") = 0 [pid 7630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7630] setpgid(0, 0) = 0 [pid 7630] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7630] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7630] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7630] write(3, "1000", 4) = 4 [pid 7630] close(3) = 0 [pid 7630] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7630] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7630] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7630] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7630] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7630] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2589]}, 88) = 2589 [pid 7630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7630] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7630] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7631 attached [pid 7631] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7631] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7631] memfd_create("syzkaller", 0) = 3 [pid 7631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7631] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7631] munmap(0x7feef78ae000, 2097152) = 0 [pid 7631] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7631] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7631] close(3) = 0 [pid 7631] mkdir("./file0", 0777) = 0 [pid 7631] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7631] chdir("./file0") = 0 [pid 7631] ioctl(4, LOOP_CLR_FD) = 0 [pid 7631] close(4) = 0 [pid 7631] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7631] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7630] <... futex resumed>) = 0 [pid 7630] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7631] <... futex resumed>) = 0 [pid 7630] <... futex resumed>) = 1 [pid 7631] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7630] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7631] <... openat resumed>) = 4 [pid 7631] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7630] <... futex resumed>) = 0 [pid 7631] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7630] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7630] <... futex resumed>) = 0 [pid 7631] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7630] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7631] <... openat resumed>) = 5 [pid 7631] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7630] <... futex resumed>) = 0 [pid 7631] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7630] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7630] <... futex resumed>) = 0 [pid 7631] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 266.479627][ T7631] loop0: detected capacity change from 0 to 4096 [ 266.502019][ T7631] ntfs: volume version 3.1. [pid 7630] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7630] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7630] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7630] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7632 attached [pid 7632] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7630] <... clone3 resumed> => {parent_tid=[2590]}, 88) = 2590 [pid 7632] set_robust_list(0x7feef7aad9a0, 24 [pid 7630] rt_sigprocmask(SIG_SETMASK, [], [pid 7632] <... set_robust_list resumed>) = 0 [pid 7630] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7630] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7630] <... futex resumed>) = 0 [pid 7632] ftruncate(4, 0 [pid 7630] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7632] <... ftruncate resumed>) = 0 [pid 7632] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7631] <... write resumed>) = 1048064 [pid 7632] <... futex resumed>) = 1 [pid 7631] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7630] <... futex resumed>) = 0 [pid 7632] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7631] <... futex resumed>) = 0 [pid 7630] close(3 [pid 7631] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7630] <... close resumed>) = 0 [pid 7630] close(4) = 0 [pid 7630] close(5) = 0 [pid 7630] close(6) = -1 EBADF (Bad file descriptor) [pid 7630] close(7) = -1 EBADF (Bad file descriptor) [pid 7630] close(8) = -1 EBADF (Bad file descriptor) [pid 7630] close(9) = -1 EBADF (Bad file descriptor) [pid 7630] close(10) = -1 EBADF (Bad file descriptor) [pid 7630] close(11) = -1 EBADF (Bad file descriptor) [pid 7630] close(12) = -1 EBADF (Bad file descriptor) [pid 7630] close(13) = -1 EBADF (Bad file descriptor) [pid 7630] close(14) = -1 EBADF (Bad file descriptor) [pid 7630] close(15) = -1 EBADF (Bad file descriptor) [pid 7630] close(16) = -1 EBADF (Bad file descriptor) [pid 7630] close(17) = -1 EBADF (Bad file descriptor) [pid 7630] close(18) = -1 EBADF (Bad file descriptor) [pid 7630] close(19) = -1 EBADF (Bad file descriptor) [pid 7630] close(20) = -1 EBADF (Bad file descriptor) [pid 7630] close(21) = -1 EBADF (Bad file descriptor) [pid 7630] close(22) = -1 EBADF (Bad file descriptor) [pid 7630] close(23) = -1 EBADF (Bad file descriptor) [pid 7630] close(24) = -1 EBADF (Bad file descriptor) [pid 7630] close(25) = -1 EBADF (Bad file descriptor) [pid 7630] close(26) = -1 EBADF (Bad file descriptor) [pid 7630] close(27) = -1 EBADF (Bad file descriptor) [pid 7630] close(28) = -1 EBADF (Bad file descriptor) [pid 7630] close(29) = -1 EBADF (Bad file descriptor) [pid 7630] exit_group(0) = ? [pid 7631] <... futex resumed>) = ? [pid 7632] <... futex resumed>) = ? [pid 7631] +++ exited with 0 +++ [pid 7632] +++ exited with 0 +++ [pid 7630] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2588, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./869", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./869", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./869/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./869/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./869/cgroup.cpu") = 0 [pid 5028] umount2("./869/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./869/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./869/binderfs") = 0 [pid 5028] umount2("./869/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./869/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./869/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./869/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./869/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./869/file0") = 0 [pid 5028] umount2("./869/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./869/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./869/cgroup") = 0 [pid 5028] umount2("./869/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./869/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./869/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./869") = 0 [pid 5028] mkdir("./870", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2591 ./strace-static-x86_64: Process 7633 attached [pid 7633] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7633] chdir("./870") = 0 [pid 7633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7633] setpgid(0, 0) = 0 [pid 7633] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7633] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7633] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7633] write(3, "1000", 4) = 4 [pid 7633] close(3) = 0 [pid 7633] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7633] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7633] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7633] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7633] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7633] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7634 attached => {parent_tid=[2592]}, 88) = 2592 [pid 7634] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7633] rt_sigprocmask(SIG_SETMASK, [], [pid 7634] <... rseq resumed>) = 0 [pid 7633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7634] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7633] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7634] rt_sigprocmask(SIG_SETMASK, [], [pid 7633] <... futex resumed>) = 0 [pid 7634] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7634] memfd_create("syzkaller", 0 [pid 7633] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7634] <... memfd_create resumed>) = 3 [pid 7634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7634] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7634] munmap(0x7feef78ae000, 2097152) = 0 [pid 7634] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7634] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7634] close(3) = 0 [pid 7634] mkdir("./file0", 0777) = 0 [pid 7634] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7634] chdir("./file0") = 0 [pid 7634] ioctl(4, LOOP_CLR_FD) = 0 [pid 7634] close(4) = 0 [pid 7634] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7633] <... futex resumed>) = 0 [pid 7633] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7634] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7633] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7634] <... openat resumed>) = 4 [pid 7634] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7633] <... futex resumed>) = 0 [pid 7633] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7633] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7634] <... futex resumed>) = 1 [pid 7634] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7634] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7633] <... futex resumed>) = 0 [pid 7633] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7633] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7634] <... futex resumed>) = 1 [ 266.720913][ T7634] loop0: detected capacity change from 0 to 4096 [ 266.741236][ T7634] ntfs: volume version 3.1. [pid 7634] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7633] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7633] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7633] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7633] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7633] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7633] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7635 attached [pid 7635] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7633] <... clone3 resumed> => {parent_tid=[2593]}, 88) = 2593 [pid 7635] <... rseq resumed>) = 0 [pid 7635] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7633] rt_sigprocmask(SIG_SETMASK, [], [pid 7635] rt_sigprocmask(SIG_SETMASK, [], [pid 7633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7633] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7635] ftruncate(4, 0 [pid 7633] <... futex resumed>) = 0 [pid 7633] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7635] <... ftruncate resumed>) = 0 [pid 7634] <... write resumed>) = 1048064 [pid 7635] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7634] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7635] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7634] <... futex resumed>) = 0 [pid 7633] <... futex resumed>) = 0 [pid 7634] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7633] close(3) = 0 [pid 7633] close(4) = 0 [pid 7633] close(5) = 0 [pid 7633] close(6) = -1 EBADF (Bad file descriptor) [pid 7633] close(7) = -1 EBADF (Bad file descriptor) [pid 7633] close(8) = -1 EBADF (Bad file descriptor) [pid 7633] close(9) = -1 EBADF (Bad file descriptor) [pid 7633] close(10) = -1 EBADF (Bad file descriptor) [pid 7633] close(11) = -1 EBADF (Bad file descriptor) [pid 7633] close(12) = -1 EBADF (Bad file descriptor) [pid 7633] close(13) = -1 EBADF (Bad file descriptor) [pid 7633] close(14) = -1 EBADF (Bad file descriptor) [pid 7633] close(15) = -1 EBADF (Bad file descriptor) [pid 7633] close(16) = -1 EBADF (Bad file descriptor) [pid 7633] close(17) = -1 EBADF (Bad file descriptor) [pid 7633] close(18) = -1 EBADF (Bad file descriptor) [pid 7633] close(19) = -1 EBADF (Bad file descriptor) [pid 7633] close(20) = -1 EBADF (Bad file descriptor) [pid 7633] close(21) = -1 EBADF (Bad file descriptor) [pid 7633] close(22) = -1 EBADF (Bad file descriptor) [pid 7633] close(23) = -1 EBADF (Bad file descriptor) [pid 7633] close(24) = -1 EBADF (Bad file descriptor) [pid 7633] close(25) = -1 EBADF (Bad file descriptor) [pid 7633] close(26) = -1 EBADF (Bad file descriptor) [pid 7633] close(27) = -1 EBADF (Bad file descriptor) [pid 7633] close(28) = -1 EBADF (Bad file descriptor) [pid 7633] close(29) = -1 EBADF (Bad file descriptor) [pid 7633] exit_group(0 [pid 7635] <... futex resumed>) = ? [pid 7633] <... exit_group resumed>) = ? [pid 7634] <... futex resumed>) = ? [pid 7635] +++ exited with 0 +++ [pid 7634] +++ exited with 0 +++ [pid 7633] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2591, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./870", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./870", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./870/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./870/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./870/cgroup.cpu") = 0 [pid 5028] umount2("./870/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./870/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./870/binderfs") = 0 [pid 5028] umount2("./870/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./870/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./870/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./870/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./870/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./870/file0") = 0 [pid 5028] umount2("./870/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./870/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./870/cgroup") = 0 [pid 5028] umount2("./870/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./870/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./870/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./870") = 0 [pid 5028] mkdir("./871", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7636 attached , child_tidptr=0x5555563a5690) = 2594 [pid 7636] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7636] chdir("./871") = 0 [pid 7636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7636] setpgid(0, 0) = 0 [pid 7636] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7636] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7636] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7636] write(3, "1000", 4) = 4 [pid 7636] close(3) = 0 [pid 7636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7636] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7636] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7636] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7637 attached [pid 7637] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7636] <... clone3 resumed> => {parent_tid=[2595]}, 88) = 2595 [pid 7637] <... rseq resumed>) = 0 [pid 7636] rt_sigprocmask(SIG_SETMASK, [], [pid 7637] set_robust_list(0x7feeffcce9a0, 24 [pid 7636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7637] <... set_robust_list resumed>) = 0 [pid 7636] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7636] <... futex resumed>) = 0 [pid 7637] memfd_create("syzkaller", 0) = 3 [pid 7636] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7637] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7637] munmap(0x7feef78ae000, 2097152) = 0 [pid 7637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7637] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7637] close(3) = 0 [pid 7637] mkdir("./file0", 0777) = 0 [pid 7637] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7637] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7637] chdir("./file0") = 0 [pid 7637] ioctl(4, LOOP_CLR_FD) = 0 [pid 7637] close(4) = 0 [pid 7637] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7636] <... futex resumed>) = 0 [pid 7637] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7636] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7636] <... futex resumed>) = 0 [pid 7637] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7636] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7637] <... openat resumed>) = 4 [pid 7637] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7637] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7636] <... futex resumed>) = 0 [pid 7636] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7637] <... futex resumed>) = 0 [pid 7636] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7637] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7637] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7636] <... futex resumed>) = 0 [pid 7637] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7636] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7637] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 266.936062][ T7637] loop0: detected capacity change from 0 to 4096 [ 266.957474][ T7637] ntfs: volume version 3.1. [pid 7636] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7636] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7636] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7638 attached => {parent_tid=[2596]}, 88) = 2596 [pid 7638] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7636] rt_sigprocmask(SIG_SETMASK, [], [pid 7638] set_robust_list(0x7feef7aad9a0, 24 [pid 7636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7638] <... set_robust_list resumed>) = 0 [pid 7636] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7638] rt_sigprocmask(SIG_SETMASK, [], [pid 7636] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7638] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7638] ftruncate(4, 0) = 0 [pid 7637] <... write resumed>) = 1048064 [pid 7637] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7637] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7638] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7636] <... futex resumed>) = 0 [pid 7636] close(3 [pid 7638] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7636] <... close resumed>) = 0 [pid 7636] close(4) = 0 [pid 7636] close(5) = 0 [pid 7636] close(6) = -1 EBADF (Bad file descriptor) [pid 7636] close(7) = -1 EBADF (Bad file descriptor) [pid 7636] close(8) = -1 EBADF (Bad file descriptor) [pid 7636] close(9) = -1 EBADF (Bad file descriptor) [pid 7636] close(10) = -1 EBADF (Bad file descriptor) [pid 7636] close(11) = -1 EBADF (Bad file descriptor) [pid 7636] close(12) = -1 EBADF (Bad file descriptor) [pid 7636] close(13) = -1 EBADF (Bad file descriptor) [pid 7636] close(14) = -1 EBADF (Bad file descriptor) [pid 7636] close(15) = -1 EBADF (Bad file descriptor) [pid 7636] close(16) = -1 EBADF (Bad file descriptor) [pid 7636] close(17) = -1 EBADF (Bad file descriptor) [pid 7636] close(18) = -1 EBADF (Bad file descriptor) [pid 7636] close(19) = -1 EBADF (Bad file descriptor) [pid 7636] close(20) = -1 EBADF (Bad file descriptor) [pid 7636] close(21) = -1 EBADF (Bad file descriptor) [pid 7636] close(22) = -1 EBADF (Bad file descriptor) [pid 7636] close(23) = -1 EBADF (Bad file descriptor) [pid 7636] close(24) = -1 EBADF (Bad file descriptor) [pid 7636] close(25) = -1 EBADF (Bad file descriptor) [pid 7636] close(26) = -1 EBADF (Bad file descriptor) [pid 7636] close(27) = -1 EBADF (Bad file descriptor) [pid 7636] close(28) = -1 EBADF (Bad file descriptor) [pid 7636] close(29) = -1 EBADF (Bad file descriptor) [pid 7636] exit_group(0 [pid 7637] <... futex resumed>) = ? [pid 7636] <... exit_group resumed>) = ? [pid 7638] <... futex resumed>) = ? [pid 7637] +++ exited with 0 +++ [pid 7638] +++ exited with 0 +++ [pid 7636] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2594, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./871", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./871", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./871/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./871/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./871/cgroup.cpu") = 0 [pid 5028] umount2("./871/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./871/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./871/binderfs") = 0 [pid 5028] umount2("./871/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./871/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./871/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./871/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./871/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./871/file0") = 0 [pid 5028] umount2("./871/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./871/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./871/cgroup") = 0 [pid 5028] umount2("./871/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./871/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./871/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./871") = 0 [pid 5028] mkdir("./872", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7639 attached [pid 7639] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7639] chdir("./872") = 0 [pid 7639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7639] setpgid(0, 0) = 0 [pid 7639] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7639] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2597 [pid 7639] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7639] write(3, "1000", 4) = 4 [pid 7639] close(3) = 0 [pid 7639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7639] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7639] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7639] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7639] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7639] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7640 attached [pid 7640] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7639] <... clone3 resumed> => {parent_tid=[2598]}, 88) = 2598 [pid 7640] <... rseq resumed>) = 0 [pid 7640] set_robust_list(0x7feeffcce9a0, 24 [pid 7639] rt_sigprocmask(SIG_SETMASK, [], [pid 7640] <... set_robust_list resumed>) = 0 [pid 7640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7640] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7639] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7639] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7640] memfd_create("syzkaller", 0) = 3 [pid 7640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7640] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7640] munmap(0x7feef78ae000, 2097152) = 0 [pid 7640] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7640] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7640] close(3) = 0 [pid 7640] mkdir("./file0", 0777) = 0 [pid 7640] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7640] chdir("./file0") = 0 [pid 7640] ioctl(4, LOOP_CLR_FD) = 0 [pid 7640] close(4) = 0 [pid 7640] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7640] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7639] <... futex resumed>) = 0 [pid 7639] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7640] <... futex resumed>) = 0 [pid 7639] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7640] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7640] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7639] <... futex resumed>) = 0 [pid 7639] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7639] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7640] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7640] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7639] <... futex resumed>) = 0 [pid 7640] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7639] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7639] <... futex resumed>) = 0 [pid 7640] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 267.159603][ T7640] loop0: detected capacity change from 0 to 4096 [ 267.181494][ T7640] ntfs: volume version 3.1. [pid 7639] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7639] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7639] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7639] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7641 attached => {parent_tid=[2599]}, 88) = 2599 [pid 7641] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7639] rt_sigprocmask(SIG_SETMASK, [], [pid 7641] set_robust_list(0x7feef7aad9a0, 24 [pid 7639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7641] <... set_robust_list resumed>) = 0 [pid 7641] rt_sigprocmask(SIG_SETMASK, [], [pid 7639] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7639] <... futex resumed>) = 0 [pid 7641] ftruncate(4, 0 [pid 7639] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7641] <... ftruncate resumed>) = 0 [pid 7640] <... write resumed>) = 1048064 [pid 7641] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7640] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7641] <... futex resumed>) = 1 [pid 7640] <... futex resumed>) = 0 [pid 7639] <... futex resumed>) = 0 [pid 7641] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7640] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7639] close(3) = 0 [pid 7639] close(4) = 0 [pid 7639] close(5) = 0 [pid 7639] close(6) = -1 EBADF (Bad file descriptor) [pid 7639] close(7) = -1 EBADF (Bad file descriptor) [pid 7639] close(8) = -1 EBADF (Bad file descriptor) [pid 7639] close(9) = -1 EBADF (Bad file descriptor) [pid 7639] close(10) = -1 EBADF (Bad file descriptor) [pid 7639] close(11) = -1 EBADF (Bad file descriptor) [pid 7639] close(12) = -1 EBADF (Bad file descriptor) [pid 7639] close(13) = -1 EBADF (Bad file descriptor) [pid 7639] close(14) = -1 EBADF (Bad file descriptor) [pid 7639] close(15) = -1 EBADF (Bad file descriptor) [pid 7639] close(16) = -1 EBADF (Bad file descriptor) [pid 7639] close(17) = -1 EBADF (Bad file descriptor) [pid 7639] close(18) = -1 EBADF (Bad file descriptor) [pid 7639] close(19) = -1 EBADF (Bad file descriptor) [pid 7639] close(20) = -1 EBADF (Bad file descriptor) [pid 7639] close(21) = -1 EBADF (Bad file descriptor) [pid 7639] close(22) = -1 EBADF (Bad file descriptor) [pid 7639] close(23) = -1 EBADF (Bad file descriptor) [pid 7639] close(24) = -1 EBADF (Bad file descriptor) [pid 7639] close(25) = -1 EBADF (Bad file descriptor) [pid 7639] close(26) = -1 EBADF (Bad file descriptor) [pid 7639] close(27) = -1 EBADF (Bad file descriptor) [pid 7639] close(28) = -1 EBADF (Bad file descriptor) [pid 7639] close(29) = -1 EBADF (Bad file descriptor) [pid 7639] exit_group(0) = ? [pid 7640] <... futex resumed>) = ? [pid 7641] <... futex resumed>) = ? [pid 7641] +++ exited with 0 +++ [pid 7640] +++ exited with 0 +++ [pid 7639] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2597, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./872", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./872", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./872/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./872/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./872/cgroup.cpu") = 0 [pid 5028] umount2("./872/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./872/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./872/binderfs") = 0 [pid 5028] umount2("./872/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./872/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./872/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./872/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./872/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./872/file0") = 0 [pid 5028] umount2("./872/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./872/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./872/cgroup") = 0 [pid 5028] umount2("./872/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./872/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./872/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./872") = 0 [pid 5028] mkdir("./873", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7642 attached , child_tidptr=0x5555563a5690) = 2600 [pid 7642] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7642] chdir("./873") = 0 [pid 7642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7642] setpgid(0, 0) = 0 [pid 7642] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7642] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7642] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7642] write(3, "1000", 4) = 4 [pid 7642] close(3) = 0 [pid 7642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7642] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7642] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7642] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7642] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2601]}, 88) = 2601 [pid 7642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7642] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7643 attached [pid 7643] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7643] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7643] memfd_create("syzkaller", 0) = 3 [pid 7643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7643] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7643] munmap(0x7feef78ae000, 2097152) = 0 [pid 7643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7643] close(3) = 0 [pid 7643] mkdir("./file0", 0777) = 0 [ 267.376698][ T7643] loop0: detected capacity change from 0 to 4096 [ 267.385498][ T7643] __ntfs_warning: 11 callbacks suppressed [ 267.385509][ T7643] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7643] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7643] chdir("./file0") = 0 [pid 7643] ioctl(4, LOOP_CLR_FD) = 0 [pid 7643] close(4) = 0 [pid 7643] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7642] <... futex resumed>) = 0 [pid 7643] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7642] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7643] <... openat resumed>) = 4 [pid 7643] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7642] <... futex resumed>) = 0 [pid 7643] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7642] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7642] <... futex resumed>) = 0 [pid 7642] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7643] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7643] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7642] <... futex resumed>) = 0 [pid 7642] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 267.423961][ T7643] ntfs: volume version 3.1. [pid 7643] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7642] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7642] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7642] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7642] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7644 attached [pid 7644] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7642] <... clone3 resumed> => {parent_tid=[2602]}, 88) = 2602 [pid 7644] <... rseq resumed>) = 0 [pid 7642] rt_sigprocmask(SIG_SETMASK, [], [pid 7644] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7642] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7644] ftruncate(4, 0 [pid 7642] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7642] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7644] <... ftruncate resumed>) = 0 [pid 7643] <... write resumed>) = 1048064 [pid 7643] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7644] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7643] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7644] <... futex resumed>) = 1 [pid 7642] <... futex resumed>) = 0 [pid 7644] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7642] close(3) = 0 [pid 7642] close(4) = 0 [pid 7642] close(5) = 0 [pid 7642] close(6) = -1 EBADF (Bad file descriptor) [pid 7642] close(7) = -1 EBADF (Bad file descriptor) [pid 7642] close(8) = -1 EBADF (Bad file descriptor) [pid 7642] close(9) = -1 EBADF (Bad file descriptor) [pid 7642] close(10) = -1 EBADF (Bad file descriptor) [pid 7642] close(11) = -1 EBADF (Bad file descriptor) [pid 7642] close(12) = -1 EBADF (Bad file descriptor) [pid 7642] close(13) = -1 EBADF (Bad file descriptor) [pid 7642] close(14) = -1 EBADF (Bad file descriptor) [pid 7642] close(15) = -1 EBADF (Bad file descriptor) [pid 7642] close(16) = -1 EBADF (Bad file descriptor) [pid 7642] close(17) = -1 EBADF (Bad file descriptor) [pid 7642] close(18) = -1 EBADF (Bad file descriptor) [pid 7642] close(19) = -1 EBADF (Bad file descriptor) [pid 7642] close(20) = -1 EBADF (Bad file descriptor) [pid 7642] close(21) = -1 EBADF (Bad file descriptor) [pid 7642] close(22) = -1 EBADF (Bad file descriptor) [pid 7642] close(23) = -1 EBADF (Bad file descriptor) [pid 7642] close(24) = -1 EBADF (Bad file descriptor) [pid 7642] close(25) = -1 EBADF (Bad file descriptor) [pid 7642] close(26) = -1 EBADF (Bad file descriptor) [pid 7642] close(27) = -1 EBADF (Bad file descriptor) [pid 7642] close(28) = -1 EBADF (Bad file descriptor) [pid 7642] close(29) = -1 EBADF (Bad file descriptor) [pid 7642] exit_group(0) = ? [pid 7644] <... futex resumed>) = ? [pid 7644] +++ exited with 0 +++ [pid 7643] <... futex resumed>) = ? [pid 7643] +++ exited with 0 +++ [pid 7642] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2600, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./873", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./873", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./873/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./873/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./873/cgroup.cpu") = 0 [pid 5028] umount2("./873/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./873/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./873/binderfs") = 0 [pid 5028] umount2("./873/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./873/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./873/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./873/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./873/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./873/file0") = 0 [pid 5028] umount2("./873/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./873/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./873/cgroup") = 0 [pid 5028] umount2("./873/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./873/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./873/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./873") = 0 [pid 5028] mkdir("./874", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7645 attached [pid 7645] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7645] chdir("./874" [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2603 [pid 7645] <... chdir resumed>) = 0 [pid 7645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7645] setpgid(0, 0) = 0 [pid 7645] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7645] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7645] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7645] write(3, "1000", 4) = 4 [pid 7645] close(3) = 0 [pid 7645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7645] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7645] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7645] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7645] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2604]}, 88) = 2604 [pid 7645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7645] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7645] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7646 attached [pid 7646] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7646] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7646] memfd_create("syzkaller", 0) = 3 [pid 7646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7646] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7646] munmap(0x7feef78ae000, 2097152) = 0 [pid 7646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7646] close(3) = 0 [pid 7646] mkdir("./file0", 0777) = 0 [pid 7646] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7646] chdir("./file0") = 0 [pid 7646] ioctl(4, LOOP_CLR_FD) = 0 [pid 7646] close(4) = 0 [pid 7646] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7645] <... futex resumed>) = 0 [pid 7646] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7645] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7645] <... futex resumed>) = 0 [pid 7646] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7645] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7646] <... openat resumed>) = 4 [pid 7646] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7646] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7645] <... futex resumed>) = 0 [pid 7645] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7646] <... futex resumed>) = 0 [pid 7645] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7646] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7646] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7645] <... futex resumed>) = 0 [pid 7646] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7645] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7646] <... futex resumed>) = 0 [pid 7645] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 267.637379][ T7646] loop0: detected capacity change from 0 to 4096 [ 267.646777][ T7646] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 267.680402][ T7646] ntfs: volume version 3.1. [pid 7646] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7645] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7645] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7645] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7647 attached => {parent_tid=[2605]}, 88) = 2605 [pid 7647] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7645] rt_sigprocmask(SIG_SETMASK, [], [pid 7647] <... rseq resumed>) = 0 [pid 7645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7647] set_robust_list(0x7feef7aad9a0, 24 [pid 7645] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7647] <... set_robust_list resumed>) = 0 [pid 7645] <... futex resumed>) = 0 [pid 7647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7645] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7647] ftruncate(4, 0) = 0 [pid 7647] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7646] <... write resumed>) = 1048064 [pid 7645] <... futex resumed>) = 0 [pid 7647] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7646] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7646] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7645] close(3) = 0 [pid 7645] close(4) = 0 [pid 7645] close(5) = 0 [pid 7645] close(6) = -1 EBADF (Bad file descriptor) [pid 7645] close(7) = -1 EBADF (Bad file descriptor) [pid 7645] close(8) = -1 EBADF (Bad file descriptor) [pid 7645] close(9) = -1 EBADF (Bad file descriptor) [pid 7645] close(10) = -1 EBADF (Bad file descriptor) [pid 7645] close(11) = -1 EBADF (Bad file descriptor) [pid 7645] close(12) = -1 EBADF (Bad file descriptor) [pid 7645] close(13) = -1 EBADF (Bad file descriptor) [pid 7645] close(14) = -1 EBADF (Bad file descriptor) [pid 7645] close(15) = -1 EBADF (Bad file descriptor) [pid 7645] close(16) = -1 EBADF (Bad file descriptor) [pid 7645] close(17) = -1 EBADF (Bad file descriptor) [pid 7645] close(18) = -1 EBADF (Bad file descriptor) [pid 7645] close(19) = -1 EBADF (Bad file descriptor) [pid 7645] close(20) = -1 EBADF (Bad file descriptor) [pid 7645] close(21) = -1 EBADF (Bad file descriptor) [pid 7645] close(22) = -1 EBADF (Bad file descriptor) [pid 7645] close(23) = -1 EBADF (Bad file descriptor) [pid 7645] close(24) = -1 EBADF (Bad file descriptor) [pid 7645] close(25) = -1 EBADF (Bad file descriptor) [pid 7645] close(26) = -1 EBADF (Bad file descriptor) [pid 7645] close(27) = -1 EBADF (Bad file descriptor) [pid 7645] close(28) = -1 EBADF (Bad file descriptor) [pid 7645] close(29) = -1 EBADF (Bad file descriptor) [pid 7645] exit_group(0) = ? [pid 7646] <... futex resumed>) = ? [pid 7647] <... futex resumed>) = ? [pid 7646] +++ exited with 0 +++ [pid 7647] +++ exited with 0 +++ [pid 7645] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2603, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./874", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./874", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./874/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./874/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./874/cgroup.cpu") = 0 [pid 5028] umount2("./874/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./874/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./874/binderfs") = 0 [pid 5028] umount2("./874/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./874/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./874/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./874/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./874/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./874/file0") = 0 [pid 5028] umount2("./874/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./874/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./874/cgroup") = 0 [pid 5028] umount2("./874/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./874/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./874/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./874") = 0 [pid 5028] mkdir("./875", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7648 attached [pid 7648] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2606 [pid 7648] <... set_robust_list resumed>) = 0 [pid 7648] chdir("./875") = 0 [pid 7648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7648] setpgid(0, 0) = 0 [pid 7648] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7648] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7648] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7648] write(3, "1000", 4) = 4 [pid 7648] close(3) = 0 [pid 7648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7648] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7648] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7648] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7648] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7648] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7649 attached [pid 7649] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7648] <... clone3 resumed> => {parent_tid=[2607]}, 88) = 2607 [pid 7649] set_robust_list(0x7feeffcce9a0, 24 [pid 7648] rt_sigprocmask(SIG_SETMASK, [], [pid 7649] <... set_robust_list resumed>) = 0 [pid 7648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7648] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7649] memfd_create("syzkaller", 0 [pid 7648] <... futex resumed>) = 0 [pid 7648] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7649] <... memfd_create resumed>) = 3 [pid 7649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7649] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7649] munmap(0x7feef78ae000, 2097152) = 0 [pid 7649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7649] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7649] close(3) = 0 [pid 7649] mkdir("./file0", 0777) = 0 [pid 7649] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7649] chdir("./file0") = 0 [pid 7649] ioctl(4, LOOP_CLR_FD) = 0 [pid 7649] close(4) = 0 [pid 7649] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7648] <... futex resumed>) = 0 [pid 7649] <... futex resumed>) = 1 [pid 7648] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7649] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7648] <... futex resumed>) = 0 [pid 7648] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7649] <... openat resumed>) = 4 [pid 7649] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7648] <... futex resumed>) = 0 [pid 7649] <... futex resumed>) = 1 [pid 7648] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7649] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7648] <... futex resumed>) = 0 [pid 7648] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7649] <... openat resumed>) = 5 [pid 7649] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7648] <... futex resumed>) = 0 [pid 7649] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7648] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7649] <... futex resumed>) = 0 [pid 7648] <... futex resumed>) = 1 [pid 7648] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 267.882143][ T7649] loop0: detected capacity change from 0 to 4096 [ 267.891789][ T7649] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 267.925594][ T7649] ntfs: volume version 3.1. [pid 7649] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7648] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7648] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7648] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7648] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2608]}, 88) = 2608 [pid 7648] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7650 attached NULL, 8) = 0 [pid 7648] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7648] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7650] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7650] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7650] ftruncate(4, 0) = 0 [pid 7650] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7649] <... write resumed>) = 1048064 [pid 7650] <... futex resumed>) = 1 [pid 7649] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7648] <... futex resumed>) = 0 [pid 7650] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7649] <... futex resumed>) = 0 [pid 7648] close(3 [pid 7649] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7648] <... close resumed>) = 0 [pid 7648] close(4) = 0 [pid 7648] close(5) = 0 [pid 7648] close(6) = -1 EBADF (Bad file descriptor) [pid 7648] close(7) = -1 EBADF (Bad file descriptor) [pid 7648] close(8) = -1 EBADF (Bad file descriptor) [pid 7648] close(9) = -1 EBADF (Bad file descriptor) [pid 7648] close(10) = -1 EBADF (Bad file descriptor) [pid 7648] close(11) = -1 EBADF (Bad file descriptor) [pid 7648] close(12) = -1 EBADF (Bad file descriptor) [pid 7648] close(13) = -1 EBADF (Bad file descriptor) [pid 7648] close(14) = -1 EBADF (Bad file descriptor) [pid 7648] close(15) = -1 EBADF (Bad file descriptor) [pid 7648] close(16) = -1 EBADF (Bad file descriptor) [pid 7648] close(17) = -1 EBADF (Bad file descriptor) [pid 7648] close(18) = -1 EBADF (Bad file descriptor) [pid 7648] close(19) = -1 EBADF (Bad file descriptor) [pid 7648] close(20) = -1 EBADF (Bad file descriptor) [pid 7648] close(21) = -1 EBADF (Bad file descriptor) [pid 7648] close(22) = -1 EBADF (Bad file descriptor) [pid 7648] close(23) = -1 EBADF (Bad file descriptor) [pid 7648] close(24) = -1 EBADF (Bad file descriptor) [pid 7648] close(25) = -1 EBADF (Bad file descriptor) [pid 7648] close(26) = -1 EBADF (Bad file descriptor) [pid 7648] close(27) = -1 EBADF (Bad file descriptor) [pid 7648] close(28) = -1 EBADF (Bad file descriptor) [pid 7648] close(29) = -1 EBADF (Bad file descriptor) [pid 7648] exit_group(0) = ? [pid 7650] <... futex resumed>) = ? [pid 7649] <... futex resumed>) = ? [pid 7650] +++ exited with 0 +++ [pid 7649] +++ exited with 0 +++ [pid 7648] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2606, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./875", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./875", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./875/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./875/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./875/cgroup.cpu") = 0 [pid 5028] umount2("./875/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./875/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./875/binderfs") = 0 [pid 5028] umount2("./875/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./875/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./875/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./875/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./875/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./875/file0") = 0 [pid 5028] umount2("./875/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./875/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./875/cgroup") = 0 [pid 5028] umount2("./875/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./875/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./875/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./875") = 0 [pid 5028] mkdir("./876", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7651 attached [pid 7651] set_robust_list(0x5555563a56a0, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2609 [pid 7651] chdir("./876") = 0 [pid 7651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7651] setpgid(0, 0) = 0 [pid 7651] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7651] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7651] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7651] write(3, "1000", 4) = 4 [pid 7651] close(3) = 0 [pid 7651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7651] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7651] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7651] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7652 attached [pid 7652] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7651] <... clone3 resumed> => {parent_tid=[2610]}, 88) = 2610 [pid 7651] rt_sigprocmask(SIG_SETMASK, [], [pid 7652] <... rseq resumed>) = 0 [pid 7652] set_robust_list(0x7feeffcce9a0, 24 [pid 7651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7652] <... set_robust_list resumed>) = 0 [pid 7651] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] rt_sigprocmask(SIG_SETMASK, [], [pid 7651] <... futex resumed>) = 0 [pid 7652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7651] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7652] memfd_create("syzkaller", 0) = 3 [pid 7652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7652] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7652] munmap(0x7feef78ae000, 2097152) = 0 [pid 7652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7652] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7652] close(3) = 0 [pid 7652] mkdir("./file0", 0777) = 0 [pid 7652] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7652] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7652] chdir("./file0") = 0 [pid 7652] ioctl(4, LOOP_CLR_FD) = 0 [pid 7652] close(4) = 0 [pid 7652] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7652] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7651] <... futex resumed>) = 0 [pid 7651] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7652] <... futex resumed>) = 0 [pid 7651] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7652] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7652] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7651] <... futex resumed>) = 0 [pid 7652] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7651] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7651] <... futex resumed>) = 0 [pid 7652] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [ 268.132628][ T7652] loop0: detected capacity change from 0 to 4096 [ 268.142195][ T7652] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 268.174233][ T7652] ntfs: volume version 3.1. [pid 7651] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7652] <... openat resumed>) = 5 [pid 7652] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7651] <... futex resumed>) = 0 [pid 7652] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7651] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7651] <... futex resumed>) = 0 [pid 7652] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7651] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7651] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7651] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7653 attached [pid 7653] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7651] <... clone3 resumed> => {parent_tid=[2611]}, 88) = 2611 [pid 7653] set_robust_list(0x7feef7aad9a0, 24 [pid 7651] rt_sigprocmask(SIG_SETMASK, [], [pid 7653] <... set_robust_list resumed>) = 0 [pid 7653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7653] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7651] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7653] ftruncate(4, 0 [pid 7651] <... futex resumed>) = 0 [pid 7651] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7653] <... ftruncate resumed>) = 0 [pid 7653] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7652] <... write resumed>) = 1048064 [pid 7653] <... futex resumed>) = 1 [pid 7652] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7653] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7652] <... futex resumed>) = 0 [pid 7652] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7651] <... futex resumed>) = 0 [pid 7651] close(3) = 0 [pid 7651] close(4) = 0 [pid 7651] close(5) = 0 [pid 7651] close(6) = -1 EBADF (Bad file descriptor) [pid 7651] close(7) = -1 EBADF (Bad file descriptor) [pid 7651] close(8) = -1 EBADF (Bad file descriptor) [pid 7651] close(9) = -1 EBADF (Bad file descriptor) [pid 7651] close(10) = -1 EBADF (Bad file descriptor) [pid 7651] close(11) = -1 EBADF (Bad file descriptor) [pid 7651] close(12) = -1 EBADF (Bad file descriptor) [pid 7651] close(13) = -1 EBADF (Bad file descriptor) [pid 7651] close(14) = -1 EBADF (Bad file descriptor) [pid 7651] close(15) = -1 EBADF (Bad file descriptor) [pid 7651] close(16) = -1 EBADF (Bad file descriptor) [pid 7651] close(17) = -1 EBADF (Bad file descriptor) [pid 7651] close(18) = -1 EBADF (Bad file descriptor) [pid 7651] close(19) = -1 EBADF (Bad file descriptor) [pid 7651] close(20) = -1 EBADF (Bad file descriptor) [pid 7651] close(21) = -1 EBADF (Bad file descriptor) [pid 7651] close(22) = -1 EBADF (Bad file descriptor) [pid 7651] close(23) = -1 EBADF (Bad file descriptor) [pid 7651] close(24) = -1 EBADF (Bad file descriptor) [pid 7651] close(25) = -1 EBADF (Bad file descriptor) [pid 7651] close(26) = -1 EBADF (Bad file descriptor) [pid 7651] close(27) = -1 EBADF (Bad file descriptor) [pid 7651] close(28) = -1 EBADF (Bad file descriptor) [pid 7651] close(29) = -1 EBADF (Bad file descriptor) [pid 7651] exit_group(0 [pid 7652] <... futex resumed>) = ? [pid 7651] <... exit_group resumed>) = ? [pid 7653] <... futex resumed>) = ? [pid 7652] +++ exited with 0 +++ [pid 7653] +++ exited with 0 +++ [pid 7651] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2609, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./876", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./876", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./876/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./876/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./876/cgroup.cpu") = 0 [pid 5028] umount2("./876/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./876/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./876/binderfs") = 0 [pid 5028] umount2("./876/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./876/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./876/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./876/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./876/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./876/file0") = 0 [pid 5028] umount2("./876/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./876/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./876/cgroup") = 0 [pid 5028] umount2("./876/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./876/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./876/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./876") = 0 [pid 5028] mkdir("./877", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7654 attached , child_tidptr=0x5555563a5690) = 2612 [pid 7654] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7654] chdir("./877") = 0 [pid 7654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7654] setpgid(0, 0) = 0 [pid 7654] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7654] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7654] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7654] write(3, "1000", 4) = 4 [pid 7654] close(3) = 0 [pid 7654] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7654] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7654] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7654] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7654] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7654] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7654] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7655 attached => {parent_tid=[2613]}, 88) = 2613 [pid 7654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7654] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7654] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7655] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7655] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7655] memfd_create("syzkaller", 0) = 3 [pid 7655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7655] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7655] munmap(0x7feef78ae000, 2097152) = 0 [pid 7655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7655] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7655] close(3) = 0 [pid 7655] mkdir("./file0", 0777) = 0 [pid 7655] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7655] chdir("./file0") = 0 [pid 7655] ioctl(4, LOOP_CLR_FD) = 0 [pid 7655] close(4) = 0 [pid 7655] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7654] <... futex resumed>) = 0 [pid 7655] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7654] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7655] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7654] <... futex resumed>) = 0 [pid 7654] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7655] <... openat resumed>) = 4 [pid 7655] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7654] <... futex resumed>) = 0 [pid 7655] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7654] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7654] <... futex resumed>) = 0 [pid 7655] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7654] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7655] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7655] <... futex resumed>) = 0 [pid 7655] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7654] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 268.386744][ T7655] loop0: detected capacity change from 0 to 4096 [ 268.396540][ T7655] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 268.429570][ T7655] ntfs: volume version 3.1. [pid 7654] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7654] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7654] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7654] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7654] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7656 attached => {parent_tid=[2614]}, 88) = 2614 [pid 7656] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7654] rt_sigprocmask(SIG_SETMASK, [], [pid 7656] <... rseq resumed>) = 0 [pid 7654] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7656] set_robust_list(0x7feef7aad9a0, 24 [pid 7654] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7656] <... set_robust_list resumed>) = 0 [pid 7654] <... futex resumed>) = 0 [pid 7656] rt_sigprocmask(SIG_SETMASK, [], [pid 7654] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7656] ftruncate(4, 0) = 0 [pid 7656] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7655] <... write resumed>) = 1048064 [pid 7655] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7655] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7656] <... futex resumed>) = 1 [pid 7654] <... futex resumed>) = 0 [pid 7656] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7654] close(3) = 0 [pid 7654] close(4) = 0 [pid 7654] close(5) = 0 [pid 7654] close(6) = -1 EBADF (Bad file descriptor) [pid 7654] close(7) = -1 EBADF (Bad file descriptor) [pid 7654] close(8) = -1 EBADF (Bad file descriptor) [pid 7654] close(9) = -1 EBADF (Bad file descriptor) [pid 7654] close(10) = -1 EBADF (Bad file descriptor) [pid 7654] close(11) = -1 EBADF (Bad file descriptor) [pid 7654] close(12) = -1 EBADF (Bad file descriptor) [pid 7654] close(13) = -1 EBADF (Bad file descriptor) [pid 7654] close(14) = -1 EBADF (Bad file descriptor) [pid 7654] close(15) = -1 EBADF (Bad file descriptor) [pid 7654] close(16) = -1 EBADF (Bad file descriptor) [pid 7654] close(17) = -1 EBADF (Bad file descriptor) [pid 7654] close(18) = -1 EBADF (Bad file descriptor) [pid 7654] close(19) = -1 EBADF (Bad file descriptor) [pid 7654] close(20) = -1 EBADF (Bad file descriptor) [pid 7654] close(21) = -1 EBADF (Bad file descriptor) [pid 7654] close(22) = -1 EBADF (Bad file descriptor) [pid 7654] close(23) = -1 EBADF (Bad file descriptor) [pid 7654] close(24) = -1 EBADF (Bad file descriptor) [pid 7654] close(25) = -1 EBADF (Bad file descriptor) [pid 7654] close(26) = -1 EBADF (Bad file descriptor) [pid 7654] close(27) = -1 EBADF (Bad file descriptor) [pid 7654] close(28) = -1 EBADF (Bad file descriptor) [pid 7654] close(29) = -1 EBADF (Bad file descriptor) [pid 7654] exit_group(0 [pid 7656] <... futex resumed>) = ? [pid 7655] <... futex resumed>) = ? [pid 7654] <... exit_group resumed>) = ? [pid 7655] +++ exited with 0 +++ [pid 7656] +++ exited with 0 +++ [pid 7654] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2612, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./877", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./877", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./877/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./877/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./877/cgroup.cpu") = 0 [pid 5028] umount2("./877/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./877/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./877/binderfs") = 0 [pid 5028] umount2("./877/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./877/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./877/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./877/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./877/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./877/file0") = 0 [pid 5028] umount2("./877/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./877/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./877/cgroup") = 0 [pid 5028] umount2("./877/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./877/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./877/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./877") = 0 [pid 5028] mkdir("./878", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2615 ./strace-static-x86_64: Process 7657 attached [pid 7657] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7657] chdir("./878") = 0 [pid 7657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7657] setpgid(0, 0) = 0 [pid 7657] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7657] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7657] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7657] write(3, "1000", 4) = 4 [pid 7657] close(3) = 0 [pid 7657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7657] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7657] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7657] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7657] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7657] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7658 attached => {parent_tid=[2616]}, 88) = 2616 [pid 7658] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7657] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7657] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7658] <... rseq resumed>) = 0 [pid 7658] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7658] memfd_create("syzkaller", 0) = 3 [pid 7658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7658] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7658] munmap(0x7feef78ae000, 2097152) = 0 [pid 7658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7658] close(3) = 0 [pid 7658] mkdir("./file0", 0777) = 0 [pid 7658] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7658] chdir("./file0") = 0 [pid 7658] ioctl(4, LOOP_CLR_FD) = 0 [pid 7658] close(4) = 0 [pid 7658] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7657] <... futex resumed>) = 0 [pid 7658] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7657] <... futex resumed>) = 0 [pid 7658] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7657] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7658] <... openat resumed>) = 4 [pid 7658] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7657] <... futex resumed>) = 0 [pid 7658] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7657] <... futex resumed>) = 0 [pid 7658] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7657] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7658] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7658] <... futex resumed>) = 0 [pid 7657] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7658] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7657] <... futex resumed>) = 0 [ 268.640220][ T7658] loop0: detected capacity change from 0 to 4096 [ 268.649594][ T7658] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 268.683163][ T7658] ntfs: volume version 3.1. [pid 7657] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7657] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7657] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7657] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7659 attached => {parent_tid=[2617]}, 88) = 2617 [pid 7657] rt_sigprocmask(SIG_SETMASK, [], [pid 7659] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7659] set_robust_list(0x7feef7aad9a0, 24 [pid 7657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7659] <... set_robust_list resumed>) = 0 [pid 7657] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7657] <... futex resumed>) = 0 [pid 7659] ftruncate(4, 0 [pid 7657] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7659] <... ftruncate resumed>) = 0 [pid 7658] <... write resumed>) = 1048064 [pid 7658] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7658] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7659] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7657] <... futex resumed>) = 0 [pid 7657] close(3) = 0 [pid 7659] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7657] close(4) = 0 [pid 7657] close(5) = 0 [pid 7657] close(6) = -1 EBADF (Bad file descriptor) [pid 7657] close(7) = -1 EBADF (Bad file descriptor) [pid 7657] close(8) = -1 EBADF (Bad file descriptor) [pid 7657] close(9) = -1 EBADF (Bad file descriptor) [pid 7657] close(10) = -1 EBADF (Bad file descriptor) [pid 7657] close(11) = -1 EBADF (Bad file descriptor) [pid 7657] close(12) = -1 EBADF (Bad file descriptor) [pid 7657] close(13) = -1 EBADF (Bad file descriptor) [pid 7657] close(14) = -1 EBADF (Bad file descriptor) [pid 7657] close(15) = -1 EBADF (Bad file descriptor) [pid 7657] close(16) = -1 EBADF (Bad file descriptor) [pid 7657] close(17) = -1 EBADF (Bad file descriptor) [pid 7657] close(18) = -1 EBADF (Bad file descriptor) [pid 7657] close(19) = -1 EBADF (Bad file descriptor) [pid 7657] close(20) = -1 EBADF (Bad file descriptor) [pid 7657] close(21) = -1 EBADF (Bad file descriptor) [pid 7657] close(22) = -1 EBADF (Bad file descriptor) [pid 7657] close(23) = -1 EBADF (Bad file descriptor) [pid 7657] close(24) = -1 EBADF (Bad file descriptor) [pid 7657] close(25) = -1 EBADF (Bad file descriptor) [pid 7657] close(26) = -1 EBADF (Bad file descriptor) [pid 7657] close(27) = -1 EBADF (Bad file descriptor) [pid 7657] close(28) = -1 EBADF (Bad file descriptor) [pid 7657] close(29) = -1 EBADF (Bad file descriptor) [pid 7657] exit_group(0) = ? [pid 7659] <... futex resumed>) = ? [pid 7658] <... futex resumed>) = ? [pid 7659] +++ exited with 0 +++ [pid 7658] +++ exited with 0 +++ [pid 7657] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2615, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./878", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./878", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./878/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./878/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./878/cgroup.cpu") = 0 [pid 5028] umount2("./878/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./878/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./878/binderfs") = 0 [pid 5028] umount2("./878/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./878/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./878/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./878/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./878/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./878/file0") = 0 [pid 5028] umount2("./878/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./878/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./878/cgroup") = 0 [pid 5028] umount2("./878/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./878/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./878/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./878") = 0 [pid 5028] mkdir("./879", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2618 ./strace-static-x86_64: Process 7660 attached [pid 7660] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7660] chdir("./879") = 0 [pid 7660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7660] setpgid(0, 0) = 0 [pid 7660] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7660] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7660] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7660] write(3, "1000", 4) = 4 [pid 7660] close(3) = 0 [pid 7660] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7660] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7660] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7660] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7660] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7660] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7661 attached => {parent_tid=[2619]}, 88) = 2619 [pid 7661] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7660] rt_sigprocmask(SIG_SETMASK, [], [pid 7661] <... rseq resumed>) = 0 [pid 7661] set_robust_list(0x7feeffcce9a0, 24 [pid 7660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7661] <... set_robust_list resumed>) = 0 [pid 7661] rt_sigprocmask(SIG_SETMASK, [], [pid 7660] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7660] <... futex resumed>) = 0 [pid 7660] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7661] memfd_create("syzkaller", 0) = 3 [pid 7661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7661] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7661] munmap(0x7feef78ae000, 2097152) = 0 [pid 7661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7661] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7661] close(3) = 0 [pid 7661] mkdir("./file0", 0777) = 0 [pid 7661] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7661] chdir("./file0") = 0 [pid 7661] ioctl(4, LOOP_CLR_FD) = 0 [pid 7661] close(4) = 0 [pid 7661] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7661] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7660] <... futex resumed>) = 0 [pid 7660] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7661] <... futex resumed>) = 0 [pid 7661] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7660] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7661] <... openat resumed>) = 4 [pid 7661] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7661] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7660] <... futex resumed>) = 0 [pid 7661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7660] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7661] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7661] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7661] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7660] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7660] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7661] <... futex resumed>) = 0 [pid 7660] <... futex resumed>) = 1 [pid 7661] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 268.892607][ T7661] loop0: detected capacity change from 0 to 4096 [ 268.902184][ T7661] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 268.932834][ T7661] ntfs: volume version 3.1. [pid 7660] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7660] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7660] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7660] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7662 attached => {parent_tid=[2620]}, 88) = 2620 [pid 7662] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7660] rt_sigprocmask(SIG_SETMASK, [], [pid 7662] <... rseq resumed>) = 0 [pid 7660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7662] set_robust_list(0x7feef7aad9a0, 24 [pid 7660] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7662] <... set_robust_list resumed>) = 0 [pid 7660] <... futex resumed>) = 0 [pid 7662] rt_sigprocmask(SIG_SETMASK, [], [pid 7660] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7662] ftruncate(4, 0) = 0 [pid 7662] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7661] <... write resumed>) = 1048064 [pid 7662] <... futex resumed>) = 1 [pid 7661] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7662] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7661] <... futex resumed>) = 0 [pid 7660] <... futex resumed>) = 0 [pid 7661] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7660] close(3) = 0 [pid 7660] close(4) = 0 [pid 7660] close(5) = 0 [pid 7660] close(6) = -1 EBADF (Bad file descriptor) [pid 7660] close(7) = -1 EBADF (Bad file descriptor) [pid 7660] close(8) = -1 EBADF (Bad file descriptor) [pid 7660] close(9) = -1 EBADF (Bad file descriptor) [pid 7660] close(10) = -1 EBADF (Bad file descriptor) [pid 7660] close(11) = -1 EBADF (Bad file descriptor) [pid 7660] close(12) = -1 EBADF (Bad file descriptor) [pid 7660] close(13) = -1 EBADF (Bad file descriptor) [pid 7660] close(14) = -1 EBADF (Bad file descriptor) [pid 7660] close(15) = -1 EBADF (Bad file descriptor) [pid 7660] close(16) = -1 EBADF (Bad file descriptor) [pid 7660] close(17) = -1 EBADF (Bad file descriptor) [pid 7660] close(18) = -1 EBADF (Bad file descriptor) [pid 7660] close(19) = -1 EBADF (Bad file descriptor) [pid 7660] close(20) = -1 EBADF (Bad file descriptor) [pid 7660] close(21) = -1 EBADF (Bad file descriptor) [pid 7660] close(22) = -1 EBADF (Bad file descriptor) [pid 7660] close(23) = -1 EBADF (Bad file descriptor) [pid 7660] close(24) = -1 EBADF (Bad file descriptor) [pid 7660] close(25) = -1 EBADF (Bad file descriptor) [pid 7660] close(26) = -1 EBADF (Bad file descriptor) [pid 7660] close(27) = -1 EBADF (Bad file descriptor) [pid 7660] close(28) = -1 EBADF (Bad file descriptor) [pid 7660] close(29) = -1 EBADF (Bad file descriptor) [pid 7660] exit_group(0 [pid 7661] <... futex resumed>) = ? [pid 7660] <... exit_group resumed>) = ? [pid 7662] <... futex resumed>) = ? [pid 7662] +++ exited with 0 +++ [pid 7661] +++ exited with 0 +++ [pid 7660] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2618, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5028] umount2("./879", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./879", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./879/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./879/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./879/cgroup.cpu") = 0 [pid 5028] umount2("./879/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./879/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./879/binderfs") = 0 [pid 5028] umount2("./879/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./879/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./879/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./879/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./879/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./879/file0") = 0 [pid 5028] umount2("./879/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./879/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./879/cgroup") = 0 [pid 5028] umount2("./879/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./879/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./879/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./879") = 0 [pid 5028] mkdir("./880", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7663 attached , child_tidptr=0x5555563a5690) = 2621 [pid 7663] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7663] chdir("./880") = 0 [pid 7663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7663] setpgid(0, 0) = 0 [pid 7663] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7663] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7663] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7663] write(3, "1000", 4) = 4 [pid 7663] close(3) = 0 [pid 7663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7663] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7663] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7663] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7664 attached [pid 7664] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7663] <... clone3 resumed> => {parent_tid=[2622]}, 88) = 2622 [pid 7664] <... rseq resumed>) = 0 [pid 7663] rt_sigprocmask(SIG_SETMASK, [], [pid 7664] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7664] rt_sigprocmask(SIG_SETMASK, [], [pid 7663] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7664] memfd_create("syzkaller", 0 [pid 7663] <... futex resumed>) = 0 [pid 7663] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7664] <... memfd_create resumed>) = 3 [pid 7664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7664] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7664] munmap(0x7feef78ae000, 2097152) = 0 [pid 7664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7664] close(3) = 0 [pid 7664] mkdir("./file0", 0777) = 0 [pid 7664] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7664] chdir("./file0") = 0 [pid 7664] ioctl(4, LOOP_CLR_FD) = 0 [pid 7664] close(4) = 0 [pid 7664] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7664] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7663] <... futex resumed>) = 0 [pid 7663] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... futex resumed>) = 0 [pid 7663] <... futex resumed>) = 1 [pid 7664] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7663] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7664] <... openat resumed>) = 4 [pid 7664] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7664] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7663] <... futex resumed>) = 0 [pid 7663] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... futex resumed>) = 0 [pid 7663] <... futex resumed>) = 1 [pid 7664] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7663] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7664] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7664] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7663] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] <... futex resumed>) = 0 [pid 7663] <... futex resumed>) = 1 [pid 7664] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 269.141654][ T7664] loop0: detected capacity change from 0 to 4096 [ 269.150534][ T7664] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 269.183253][ T7664] ntfs: volume version 3.1. [pid 7663] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7663] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7663] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7665 attached [pid 7665] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7663] <... clone3 resumed> => {parent_tid=[2623]}, 88) = 2623 [pid 7665] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7665] rt_sigprocmask(SIG_SETMASK, [], [pid 7663] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7665] ftruncate(4, 0 [pid 7663] <... futex resumed>) = 0 [pid 7663] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7665] <... ftruncate resumed>) = 0 [pid 7664] <... write resumed>) = 1048064 [pid 7665] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7664] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7663] <... futex resumed>) = 0 [pid 7665] <... futex resumed>) = 1 [pid 7664] <... futex resumed>) = 0 [pid 7665] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7664] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7663] close(3) = 0 [pid 7663] close(4) = 0 [pid 7663] close(5) = 0 [pid 7663] close(6) = -1 EBADF (Bad file descriptor) [pid 7663] close(7) = -1 EBADF (Bad file descriptor) [pid 7663] close(8) = -1 EBADF (Bad file descriptor) [pid 7663] close(9) = -1 EBADF (Bad file descriptor) [pid 7663] close(10) = -1 EBADF (Bad file descriptor) [pid 7663] close(11) = -1 EBADF (Bad file descriptor) [pid 7663] close(12) = -1 EBADF (Bad file descriptor) [pid 7663] close(13) = -1 EBADF (Bad file descriptor) [pid 7663] close(14) = -1 EBADF (Bad file descriptor) [pid 7663] close(15) = -1 EBADF (Bad file descriptor) [pid 7663] close(16) = -1 EBADF (Bad file descriptor) [pid 7663] close(17) = -1 EBADF (Bad file descriptor) [pid 7663] close(18) = -1 EBADF (Bad file descriptor) [pid 7663] close(19) = -1 EBADF (Bad file descriptor) [pid 7663] close(20) = -1 EBADF (Bad file descriptor) [pid 7663] close(21) = -1 EBADF (Bad file descriptor) [pid 7663] close(22) = -1 EBADF (Bad file descriptor) [pid 7663] close(23) = -1 EBADF (Bad file descriptor) [pid 7663] close(24) = -1 EBADF (Bad file descriptor) [pid 7663] close(25) = -1 EBADF (Bad file descriptor) [pid 7663] close(26) = -1 EBADF (Bad file descriptor) [pid 7663] close(27) = -1 EBADF (Bad file descriptor) [pid 7663] close(28) = -1 EBADF (Bad file descriptor) [pid 7663] close(29) = -1 EBADF (Bad file descriptor) [pid 7663] exit_group(0) = ? [pid 7665] <... futex resumed>) = ? [pid 7664] <... futex resumed>) = ? [pid 7665] +++ exited with 0 +++ [pid 7664] +++ exited with 0 +++ [pid 7663] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2621, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./880", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./880", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./880/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./880/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./880/cgroup.cpu") = 0 [pid 5028] umount2("./880/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./880/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./880/binderfs") = 0 [pid 5028] umount2("./880/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./880/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./880/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./880/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./880/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./880/file0") = 0 [pid 5028] umount2("./880/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./880/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./880/cgroup") = 0 [pid 5028] umount2("./880/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./880/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./880/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./880") = 0 [pid 5028] mkdir("./881", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2624 ./strace-static-x86_64: Process 7666 attached [pid 7666] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7666] chdir("./881") = 0 [pid 7666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7666] setpgid(0, 0) = 0 [pid 7666] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7666] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7666] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7666] write(3, "1000", 4) = 4 [pid 7666] close(3) = 0 [pid 7666] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7666] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7666] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7666] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7667 attached [pid 7667] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7666] <... clone3 resumed> => {parent_tid=[2625]}, 88) = 2625 [pid 7666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7666] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7667] <... rseq resumed>) = 0 [pid 7666] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7667] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7667] memfd_create("syzkaller", 0) = 3 [pid 7667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7667] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7667] munmap(0x7feef78ae000, 2097152) = 0 [pid 7667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7667] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7667] close(3) = 0 [pid 7667] mkdir("./file0", 0777) = 0 [pid 7667] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7667] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7667] chdir("./file0") = 0 [pid 7667] ioctl(4, LOOP_CLR_FD) = 0 [pid 7667] close(4) = 0 [pid 7667] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7666] <... futex resumed>) = 0 [pid 7667] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7666] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7666] <... futex resumed>) = 0 [pid 7667] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7666] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7667] <... openat resumed>) = 4 [pid 7667] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7666] <... futex resumed>) = 0 [pid 7667] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7666] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7667] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7666] <... futex resumed>) = 0 [pid 7667] <... openat resumed>) = 5 [pid 7666] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7667] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7667] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 269.389694][ T7667] loop0: detected capacity change from 0 to 4096 [ 269.399122][ T7667] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 269.431864][ T7667] ntfs: volume version 3.1. [pid 7666] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7666] <... futex resumed>) = 0 [pid 7667] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7666] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7666] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7666] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2626]}, 88) = 2626 [pid 7666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7666] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7666] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7668 attached [pid 7668] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7668] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7668] rt_sigprocmask(SIG_SETMASK, [], [pid 7667] <... write resumed>) = 1048064 [pid 7668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7667] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7668] ftruncate(4, 0 [pid 7667] <... futex resumed>) = 0 [pid 7667] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7668] <... ftruncate resumed>) = 0 [pid 7668] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7666] <... futex resumed>) = 0 [pid 7668] <... futex resumed>) = 1 [pid 7668] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7666] close(3) = 0 [pid 7666] close(4) = 0 [pid 7666] close(5) = 0 [pid 7666] close(6) = -1 EBADF (Bad file descriptor) [pid 7666] close(7) = -1 EBADF (Bad file descriptor) [pid 7666] close(8) = -1 EBADF (Bad file descriptor) [pid 7666] close(9) = -1 EBADF (Bad file descriptor) [pid 7666] close(10) = -1 EBADF (Bad file descriptor) [pid 7666] close(11) = -1 EBADF (Bad file descriptor) [pid 7666] close(12) = -1 EBADF (Bad file descriptor) [pid 7666] close(13) = -1 EBADF (Bad file descriptor) [pid 7666] close(14) = -1 EBADF (Bad file descriptor) [pid 7666] close(15) = -1 EBADF (Bad file descriptor) [pid 7666] close(16) = -1 EBADF (Bad file descriptor) [pid 7666] close(17) = -1 EBADF (Bad file descriptor) [pid 7666] close(18) = -1 EBADF (Bad file descriptor) [pid 7666] close(19) = -1 EBADF (Bad file descriptor) [pid 7666] close(20) = -1 EBADF (Bad file descriptor) [pid 7666] close(21) = -1 EBADF (Bad file descriptor) [pid 7666] close(22) = -1 EBADF (Bad file descriptor) [pid 7666] close(23) = -1 EBADF (Bad file descriptor) [pid 7666] close(24) = -1 EBADF (Bad file descriptor) [pid 7666] close(25) = -1 EBADF (Bad file descriptor) [pid 7666] close(26) = -1 EBADF (Bad file descriptor) [pid 7666] close(27) = -1 EBADF (Bad file descriptor) [pid 7666] close(28) = -1 EBADF (Bad file descriptor) [pid 7666] close(29) = -1 EBADF (Bad file descriptor) [pid 7666] exit_group(0 [pid 7668] <... futex resumed>) = ? [pid 7667] <... futex resumed>) = ? [pid 7666] <... exit_group resumed>) = ? [pid 7668] +++ exited with 0 +++ [pid 7667] +++ exited with 0 +++ [pid 7666] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2624, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./881", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./881", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./881/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./881/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./881/cgroup.cpu") = 0 [pid 5028] umount2("./881/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./881/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./881/binderfs") = 0 [pid 5028] umount2("./881/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./881/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./881/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./881/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./881/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./881/file0") = 0 [pid 5028] umount2("./881/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./881/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./881/cgroup") = 0 [pid 5028] umount2("./881/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./881/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./881/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./881") = 0 [pid 5028] mkdir("./882", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2627 ./strace-static-x86_64: Process 7669 attached [pid 7669] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7669] chdir("./882") = 0 [pid 7669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7669] setpgid(0, 0) = 0 [pid 7669] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7669] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7669] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7669] write(3, "1000", 4) = 4 [pid 7669] close(3) = 0 [pid 7669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7669] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7669] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7669] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7670 attached => {parent_tid=[2628]}, 88) = 2628 [pid 7670] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7669] rt_sigprocmask(SIG_SETMASK, [], [pid 7670] <... rseq resumed>) = 0 [pid 7670] set_robust_list(0x7feeffcce9a0, 24 [pid 7669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7670] <... set_robust_list resumed>) = 0 [pid 7670] rt_sigprocmask(SIG_SETMASK, [], [pid 7669] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7670] memfd_create("syzkaller", 0 [pid 7669] <... futex resumed>) = 0 [pid 7670] <... memfd_create resumed>) = 3 [pid 7669] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7670] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7670] munmap(0x7feef78ae000, 2097152) = 0 [pid 7670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7670] close(3) = 0 [pid 7670] mkdir("./file0", 0777) = 0 [pid 7670] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7670] chdir("./file0") = 0 [pid 7670] ioctl(4, LOOP_CLR_FD) = 0 [pid 7670] close(4) = 0 [pid 7670] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7669] <... futex resumed>) = 0 [pid 7670] <... futex resumed>) = 1 [pid 7670] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7669] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7669] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7670] <... openat resumed>) = 4 [pid 7670] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7669] <... futex resumed>) = 0 [pid 7669] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7670] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7669] <... futex resumed>) = 0 [pid 7670] <... openat resumed>) = 5 [pid 7669] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7670] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7670] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7669] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7669] <... futex resumed>) = 0 [pid 7670] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 269.667022][ T7670] loop0: detected capacity change from 0 to 4096 [ 269.677110][ T7670] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 269.710923][ T7670] ntfs: volume version 3.1. [pid 7669] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7669] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7669] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7671 attached => {parent_tid=[2629]}, 88) = 2629 [pid 7671] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7669] rt_sigprocmask(SIG_SETMASK, [], [pid 7671] <... rseq resumed>) = 0 [pid 7669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7671] set_robust_list(0x7feef7aad9a0, 24 [pid 7669] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7671] <... set_robust_list resumed>) = 0 [pid 7669] <... futex resumed>) = 0 [pid 7671] rt_sigprocmask(SIG_SETMASK, [], [pid 7669] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7671] ftruncate(4, 0) = 0 [pid 7670] <... write resumed>) = 1048064 [pid 7670] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7670] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7671] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7671] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7669] <... futex resumed>) = 0 [pid 7669] close(3) = 0 [pid 7669] close(4) = 0 [pid 7669] close(5) = 0 [pid 7669] close(6) = -1 EBADF (Bad file descriptor) [pid 7669] close(7) = -1 EBADF (Bad file descriptor) [pid 7669] close(8) = -1 EBADF (Bad file descriptor) [pid 7669] close(9) = -1 EBADF (Bad file descriptor) [pid 7669] close(10) = -1 EBADF (Bad file descriptor) [pid 7669] close(11) = -1 EBADF (Bad file descriptor) [pid 7669] close(12) = -1 EBADF (Bad file descriptor) [pid 7669] close(13) = -1 EBADF (Bad file descriptor) [pid 7669] close(14) = -1 EBADF (Bad file descriptor) [pid 7669] close(15) = -1 EBADF (Bad file descriptor) [pid 7669] close(16) = -1 EBADF (Bad file descriptor) [pid 7669] close(17) = -1 EBADF (Bad file descriptor) [pid 7669] close(18) = -1 EBADF (Bad file descriptor) [pid 7669] close(19) = -1 EBADF (Bad file descriptor) [pid 7669] close(20) = -1 EBADF (Bad file descriptor) [pid 7669] close(21) = -1 EBADF (Bad file descriptor) [pid 7669] close(22) = -1 EBADF (Bad file descriptor) [pid 7669] close(23) = -1 EBADF (Bad file descriptor) [pid 7669] close(24) = -1 EBADF (Bad file descriptor) [pid 7669] close(25) = -1 EBADF (Bad file descriptor) [pid 7669] close(26) = -1 EBADF (Bad file descriptor) [pid 7669] close(27) = -1 EBADF (Bad file descriptor) [pid 7669] close(28) = -1 EBADF (Bad file descriptor) [pid 7669] close(29) = -1 EBADF (Bad file descriptor) [pid 7669] exit_group(0) = ? [pid 7671] <... futex resumed>) = ? [pid 7670] <... futex resumed>) = ? [pid 7671] +++ exited with 0 +++ [pid 7670] +++ exited with 0 +++ [pid 7669] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2627, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./882", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./882", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./882/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./882/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./882/cgroup.cpu") = 0 [pid 5028] umount2("./882/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./882/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./882/binderfs") = 0 [pid 5028] umount2("./882/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./882/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./882/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./882/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./882/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./882/file0") = 0 [pid 5028] umount2("./882/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./882/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./882/cgroup") = 0 [pid 5028] umount2("./882/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./882/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./882/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./882") = 0 [pid 5028] mkdir("./883", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2630 ./strace-static-x86_64: Process 7672 attached [pid 7672] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7672] chdir("./883") = 0 [pid 7672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7672] setpgid(0, 0) = 0 [pid 7672] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7672] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7672] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7672] write(3, "1000", 4) = 4 [pid 7672] close(3) = 0 [pid 7672] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7672] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7672] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7672] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7672] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7672] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7673 attached [pid 7673] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7673] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7673] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7672] <... clone3 resumed> => {parent_tid=[2631]}, 88) = 2631 [pid 7672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7672] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7673] <... futex resumed>) = 0 [pid 7672] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7673] memfd_create("syzkaller", 0) = 3 [pid 7673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7673] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7673] munmap(0x7feef78ae000, 2097152) = 0 [pid 7673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7673] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7673] close(3) = 0 [pid 7673] mkdir("./file0", 0777) = 0 [pid 7673] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7673] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7673] chdir("./file0") = 0 [pid 7673] ioctl(4, LOOP_CLR_FD) = 0 [pid 7673] close(4) = 0 [pid 7673] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7673] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7672] <... futex resumed>) = 0 [pid 7672] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7673] <... futex resumed>) = 0 [pid 7672] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7673] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7673] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7673] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7672] <... futex resumed>) = 0 [pid 7672] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7673] <... futex resumed>) = 0 [pid 7672] <... futex resumed>) = 1 [pid 7673] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7672] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7673] <... openat resumed>) = 5 [pid 7673] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7672] <... futex resumed>) = 0 [pid 7673] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7672] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7672] <... futex resumed>) = 0 [pid 7673] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 269.938187][ T7673] loop0: detected capacity change from 0 to 4096 [ 269.959068][ T7673] ntfs: volume version 3.1. [pid 7672] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7672] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7672] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7672] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7674 attached => {parent_tid=[2632]}, 88) = 2632 [pid 7674] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7672] rt_sigprocmask(SIG_SETMASK, [], [pid 7674] <... rseq resumed>) = 0 [pid 7672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7674] set_robust_list(0x7feef7aad9a0, 24 [pid 7672] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] <... set_robust_list resumed>) = 0 [pid 7672] <... futex resumed>) = 0 [pid 7674] rt_sigprocmask(SIG_SETMASK, [], [pid 7672] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7674] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7674] ftruncate(4, 0) = 0 [pid 7674] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7673] <... write resumed>) = 1048064 [pid 7672] <... futex resumed>) = 0 [pid 7673] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7674] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7673] <... futex resumed>) = 0 [pid 7672] close(3 [pid 7673] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7672] <... close resumed>) = 0 [pid 7672] close(4) = 0 [pid 7672] close(5) = 0 [pid 7672] close(6) = -1 EBADF (Bad file descriptor) [pid 7672] close(7) = -1 EBADF (Bad file descriptor) [pid 7672] close(8) = -1 EBADF (Bad file descriptor) [pid 7672] close(9) = -1 EBADF (Bad file descriptor) [pid 7672] close(10) = -1 EBADF (Bad file descriptor) [pid 7672] close(11) = -1 EBADF (Bad file descriptor) [pid 7672] close(12) = -1 EBADF (Bad file descriptor) [pid 7672] close(13) = -1 EBADF (Bad file descriptor) [pid 7672] close(14) = -1 EBADF (Bad file descriptor) [pid 7672] close(15) = -1 EBADF (Bad file descriptor) [pid 7672] close(16) = -1 EBADF (Bad file descriptor) [pid 7672] close(17) = -1 EBADF (Bad file descriptor) [pid 7672] close(18) = -1 EBADF (Bad file descriptor) [pid 7672] close(19) = -1 EBADF (Bad file descriptor) [pid 7672] close(20) = -1 EBADF (Bad file descriptor) [pid 7672] close(21) = -1 EBADF (Bad file descriptor) [pid 7672] close(22) = -1 EBADF (Bad file descriptor) [pid 7672] close(23) = -1 EBADF (Bad file descriptor) [pid 7672] close(24) = -1 EBADF (Bad file descriptor) [pid 7672] close(25) = -1 EBADF (Bad file descriptor) [pid 7672] close(26) = -1 EBADF (Bad file descriptor) [pid 7672] close(27) = -1 EBADF (Bad file descriptor) [pid 7672] close(28) = -1 EBADF (Bad file descriptor) [pid 7672] close(29) = -1 EBADF (Bad file descriptor) [pid 7672] exit_group(0 [pid 7673] <... futex resumed>) = ? [pid 7674] <... futex resumed>) = ? [pid 7672] <... exit_group resumed>) = ? [pid 7673] +++ exited with 0 +++ [pid 7674] +++ exited with 0 +++ [pid 7672] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2630, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./883", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./883", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./883/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./883/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./883/cgroup.cpu") = 0 [pid 5028] umount2("./883/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./883/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./883/binderfs") = 0 [pid 5028] umount2("./883/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./883/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./883/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./883/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./883/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./883/file0") = 0 [pid 5028] umount2("./883/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./883/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./883/cgroup") = 0 [pid 5028] umount2("./883/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./883/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./883/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./883") = 0 [pid 5028] mkdir("./884", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2633 ./strace-static-x86_64: Process 7675 attached [pid 7675] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7675] chdir("./884") = 0 [pid 7675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7675] setpgid(0, 0) = 0 [pid 7675] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7675] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7675] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7675] write(3, "1000", 4) = 4 [pid 7675] close(3) = 0 [pid 7675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7675] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7675] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7675] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2634]}, 88) = 2634 [pid 7675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7675] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 7676 attached ) = 0 [pid 7676] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7675] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7676] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7676] memfd_create("syzkaller", 0) = 3 [pid 7676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7676] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7676] munmap(0x7feef78ae000, 2097152) = 0 [pid 7676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7676] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7676] close(3) = 0 [pid 7676] mkdir("./file0", 0777) = 0 [pid 7676] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7676] chdir("./file0") = 0 [pid 7676] ioctl(4, LOOP_CLR_FD) = 0 [pid 7676] close(4) = 0 [pid 7676] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7675] <... futex resumed>) = 0 [pid 7675] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7676] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7675] <... futex resumed>) = 0 [pid 7676] <... openat resumed>) = 4 [pid 7676] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7675] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7676] <... futex resumed>) = 0 [pid 7675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7675] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7675] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7676] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7676] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7676] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7675] <... futex resumed>) = 0 [pid 7675] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7676] <... futex resumed>) = 0 [pid 7675] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 270.171963][ T7676] loop0: detected capacity change from 0 to 4096 [ 270.193254][ T7676] ntfs: volume version 3.1. [pid 7676] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7675] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7675] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7675] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7675] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7675] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7677 attached [pid 7677] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7677] set_robust_list(0x7feef7aad9a0, 24 [pid 7675] <... clone3 resumed> => {parent_tid=[2635]}, 88) = 2635 [pid 7677] <... set_robust_list resumed>) = 0 [pid 7677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7675] rt_sigprocmask(SIG_SETMASK, [], [pid 7677] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7675] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7677] <... futex resumed>) = 0 [pid 7675] <... futex resumed>) = 1 [pid 7677] ftruncate(4, 0 [pid 7675] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7677] <... ftruncate resumed>) = 0 [pid 7677] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7677] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7676] <... write resumed>) = 1048064 [pid 7676] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7675] <... futex resumed>) = 0 [pid 7676] <... futex resumed>) = 0 [pid 7675] close(3 [pid 7676] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7675] <... close resumed>) = 0 [pid 7675] close(4) = 0 [pid 7675] close(5) = 0 [pid 7675] close(6) = -1 EBADF (Bad file descriptor) [pid 7675] close(7) = -1 EBADF (Bad file descriptor) [pid 7675] close(8) = -1 EBADF (Bad file descriptor) [pid 7675] close(9) = -1 EBADF (Bad file descriptor) [pid 7675] close(10) = -1 EBADF (Bad file descriptor) [pid 7675] close(11) = -1 EBADF (Bad file descriptor) [pid 7675] close(12) = -1 EBADF (Bad file descriptor) [pid 7675] close(13) = -1 EBADF (Bad file descriptor) [pid 7675] close(14) = -1 EBADF (Bad file descriptor) [pid 7675] close(15) = -1 EBADF (Bad file descriptor) [pid 7675] close(16) = -1 EBADF (Bad file descriptor) [pid 7675] close(17) = -1 EBADF (Bad file descriptor) [pid 7675] close(18) = -1 EBADF (Bad file descriptor) [pid 7675] close(19) = -1 EBADF (Bad file descriptor) [pid 7675] close(20) = -1 EBADF (Bad file descriptor) [pid 7675] close(21) = -1 EBADF (Bad file descriptor) [pid 7675] close(22) = -1 EBADF (Bad file descriptor) [pid 7675] close(23) = -1 EBADF (Bad file descriptor) [pid 7675] close(24) = -1 EBADF (Bad file descriptor) [pid 7675] close(25) = -1 EBADF (Bad file descriptor) [pid 7675] close(26) = -1 EBADF (Bad file descriptor) [pid 7675] close(27) = -1 EBADF (Bad file descriptor) [pid 7675] close(28) = -1 EBADF (Bad file descriptor) [pid 7675] close(29) = -1 EBADF (Bad file descriptor) [pid 7675] exit_group(0 [pid 7676] <... futex resumed>) = ? [pid 7677] <... futex resumed>) = ? [pid 7675] <... exit_group resumed>) = ? [pid 7676] +++ exited with 0 +++ [pid 7677] +++ exited with 0 +++ [pid 7675] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2633, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./884", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./884", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./884/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./884/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./884/cgroup.cpu") = 0 [pid 5028] umount2("./884/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./884/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./884/binderfs") = 0 [pid 5028] umount2("./884/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./884/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./884/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./884/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./884/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./884/file0") = 0 [pid 5028] umount2("./884/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./884/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./884/cgroup") = 0 [pid 5028] umount2("./884/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./884/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./884/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./884") = 0 [pid 5028] mkdir("./885", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7678 attached , child_tidptr=0x5555563a5690) = 2636 [pid 7678] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7678] chdir("./885") = 0 [pid 7678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7678] setpgid(0, 0) = 0 [pid 7678] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7678] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7678] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7678] write(3, "1000", 4) = 4 [pid 7678] close(3) = 0 [pid 7678] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7678] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7678] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7678] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7678] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7679 attached [pid 7679] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7678] <... clone3 resumed> => {parent_tid=[2637]}, 88) = 2637 [pid 7678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7678] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7679] <... rseq resumed>) = 0 [pid 7678] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7679] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7679] memfd_create("syzkaller", 0) = 3 [pid 7679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7679] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7679] munmap(0x7feef78ae000, 2097152) = 0 [pid 7679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7679] close(3) = 0 [pid 7679] mkdir("./file0", 0777) = 0 [pid 7679] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7679] chdir("./file0") = 0 [pid 7679] ioctl(4, LOOP_CLR_FD) = 0 [pid 7679] close(4) = 0 [pid 7679] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7678] <... futex resumed>) = 0 [pid 7679] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7678] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7678] <... futex resumed>) = 0 [pid 7679] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7678] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7679] <... openat resumed>) = 4 [pid 7679] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7678] <... futex resumed>) = 0 [pid 7679] <... futex resumed>) = 1 [pid 7678] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7679] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7678] <... futex resumed>) = 0 [pid 7679] <... openat resumed>) = 5 [pid 7678] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7679] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7679] <... futex resumed>) = 0 [pid 7678] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7679] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7678] <... futex resumed>) = 0 [ 270.407473][ T7679] loop0: detected capacity change from 0 to 4096 [ 270.427661][ T7679] ntfs: volume version 3.1. [pid 7678] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7678] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7678] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7678] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7680 attached => {parent_tid=[2638]}, 88) = 2638 [pid 7680] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7678] rt_sigprocmask(SIG_SETMASK, [], [pid 7680] <... rseq resumed>) = 0 [pid 7678] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7680] set_robust_list(0x7feef7aad9a0, 24 [pid 7678] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7680] <... set_robust_list resumed>) = 0 [pid 7678] <... futex resumed>) = 0 [pid 7680] rt_sigprocmask(SIG_SETMASK, [], [pid 7678] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7680] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7680] ftruncate(4, 0) = 0 [pid 7680] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7678] <... futex resumed>) = 0 [pid 7680] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7679] <... write resumed>) = 1048064 [pid 7679] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7679] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7678] close(3) = 0 [pid 7678] close(4) = 0 [pid 7678] close(5) = 0 [pid 7678] close(6) = -1 EBADF (Bad file descriptor) [pid 7678] close(7) = -1 EBADF (Bad file descriptor) [pid 7678] close(8) = -1 EBADF (Bad file descriptor) [pid 7678] close(9) = -1 EBADF (Bad file descriptor) [pid 7678] close(10) = -1 EBADF (Bad file descriptor) [pid 7678] close(11) = -1 EBADF (Bad file descriptor) [pid 7678] close(12) = -1 EBADF (Bad file descriptor) [pid 7678] close(13) = -1 EBADF (Bad file descriptor) [pid 7678] close(14) = -1 EBADF (Bad file descriptor) [pid 7678] close(15) = -1 EBADF (Bad file descriptor) [pid 7678] close(16) = -1 EBADF (Bad file descriptor) [pid 7678] close(17) = -1 EBADF (Bad file descriptor) [pid 7678] close(18) = -1 EBADF (Bad file descriptor) [pid 7678] close(19) = -1 EBADF (Bad file descriptor) [pid 7678] close(20) = -1 EBADF (Bad file descriptor) [pid 7678] close(21) = -1 EBADF (Bad file descriptor) [pid 7678] close(22) = -1 EBADF (Bad file descriptor) [pid 7678] close(23) = -1 EBADF (Bad file descriptor) [pid 7678] close(24) = -1 EBADF (Bad file descriptor) [pid 7678] close(25) = -1 EBADF (Bad file descriptor) [pid 7678] close(26) = -1 EBADF (Bad file descriptor) [pid 7678] close(27) = -1 EBADF (Bad file descriptor) [pid 7678] close(28) = -1 EBADF (Bad file descriptor) [pid 7678] close(29) = -1 EBADF (Bad file descriptor) [pid 7678] exit_group(0) = ? [pid 7680] <... futex resumed>) = ? [pid 7679] <... futex resumed>) = ? [pid 7680] +++ exited with 0 +++ [pid 7679] +++ exited with 0 +++ [pid 7678] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2636, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./885", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./885", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./885/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./885/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./885/cgroup.cpu") = 0 [pid 5028] umount2("./885/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./885/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./885/binderfs") = 0 [pid 5028] umount2("./885/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./885/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./885/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./885/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./885/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./885/file0") = 0 [pid 5028] umount2("./885/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./885/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./885/cgroup") = 0 [pid 5028] umount2("./885/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./885/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./885/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./885") = 0 [pid 5028] mkdir("./886", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7681 attached , child_tidptr=0x5555563a5690) = 2639 [pid 7681] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7681] chdir("./886") = 0 [pid 7681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7681] setpgid(0, 0) = 0 [pid 7681] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7681] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7681] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7681] write(3, "1000", 4) = 4 [pid 7681] close(3) = 0 [pid 7681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7681] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7681] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7681] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7681] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7682 attached => {parent_tid=[2640]}, 88) = 2640 [pid 7682] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7681] rt_sigprocmask(SIG_SETMASK, [], [pid 7682] <... rseq resumed>) = 0 [pid 7681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7682] set_robust_list(0x7feeffcce9a0, 24 [pid 7681] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7682] <... set_robust_list resumed>) = 0 [pid 7681] <... futex resumed>) = 0 [pid 7682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7681] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7682] memfd_create("syzkaller", 0) = 3 [pid 7682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7682] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7682] munmap(0x7feef78ae000, 2097152) = 0 [pid 7682] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7682] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7682] close(3) = 0 [pid 7682] mkdir("./file0", 0777) = 0 [pid 7682] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7682] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7682] chdir("./file0") = 0 [pid 7682] ioctl(4, LOOP_CLR_FD) = 0 [pid 7682] close(4) = 0 [pid 7682] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7681] <... futex resumed>) = 0 [pid 7681] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7682] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7681] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7682] <... openat resumed>) = 4 [pid 7682] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7681] <... futex resumed>) = 0 [pid 7681] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7682] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7681] <... futex resumed>) = 0 [pid 7681] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7682] <... openat resumed>) = 5 [pid 7682] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7682] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7681] <... futex resumed>) = 0 [pid 7681] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7681] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7682] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 270.612477][ T7682] loop0: detected capacity change from 0 to 4096 [ 270.633276][ T7682] ntfs: volume version 3.1. [pid 7682] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7681] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7681] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7681] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7681] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7683 attached => {parent_tid=[2641]}, 88) = 2641 [pid 7683] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7681] rt_sigprocmask(SIG_SETMASK, [], [pid 7683] <... rseq resumed>) = 0 [pid 7681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7683] set_robust_list(0x7feef7aad9a0, 24 [pid 7681] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7683] <... set_robust_list resumed>) = 0 [pid 7681] <... futex resumed>) = 0 [pid 7683] rt_sigprocmask(SIG_SETMASK, [], [pid 7681] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7683] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7683] ftruncate(4, 0) = 0 [pid 7683] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7682] <... write resumed>) = 1048064 [pid 7683] <... futex resumed>) = 1 [pid 7682] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7683] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7682] <... futex resumed>) = 0 [pid 7681] <... futex resumed>) = 0 [pid 7682] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7681] close(3) = 0 [pid 7681] close(4) = 0 [pid 7681] close(5) = 0 [pid 7681] close(6) = -1 EBADF (Bad file descriptor) [pid 7681] close(7) = -1 EBADF (Bad file descriptor) [pid 7681] close(8) = -1 EBADF (Bad file descriptor) [pid 7681] close(9) = -1 EBADF (Bad file descriptor) [pid 7681] close(10) = -1 EBADF (Bad file descriptor) [pid 7681] close(11) = -1 EBADF (Bad file descriptor) [pid 7681] close(12) = -1 EBADF (Bad file descriptor) [pid 7681] close(13) = -1 EBADF (Bad file descriptor) [pid 7681] close(14) = -1 EBADF (Bad file descriptor) [pid 7681] close(15) = -1 EBADF (Bad file descriptor) [pid 7681] close(16) = -1 EBADF (Bad file descriptor) [pid 7681] close(17) = -1 EBADF (Bad file descriptor) [pid 7681] close(18) = -1 EBADF (Bad file descriptor) [pid 7681] close(19) = -1 EBADF (Bad file descriptor) [pid 7681] close(20) = -1 EBADF (Bad file descriptor) [pid 7681] close(21) = -1 EBADF (Bad file descriptor) [pid 7681] close(22) = -1 EBADF (Bad file descriptor) [pid 7681] close(23) = -1 EBADF (Bad file descriptor) [pid 7681] close(24) = -1 EBADF (Bad file descriptor) [pid 7681] close(25) = -1 EBADF (Bad file descriptor) [pid 7681] close(26) = -1 EBADF (Bad file descriptor) [pid 7681] close(27) = -1 EBADF (Bad file descriptor) [pid 7681] close(28) = -1 EBADF (Bad file descriptor) [pid 7681] close(29) = -1 EBADF (Bad file descriptor) [pid 7681] exit_group(0) = ? [pid 7682] <... futex resumed>) = ? [pid 7683] <... futex resumed>) = ? [pid 7682] +++ exited with 0 +++ [pid 7683] +++ exited with 0 +++ [pid 7681] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2639, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./886", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./886", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./886/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./886/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./886/cgroup.cpu") = 0 [pid 5028] umount2("./886/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./886/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./886/binderfs") = 0 [pid 5028] umount2("./886/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./886/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./886/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./886/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./886/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./886/file0") = 0 [pid 5028] umount2("./886/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./886/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./886/cgroup") = 0 [pid 5028] umount2("./886/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./886/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./886/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./886") = 0 [pid 5028] mkdir("./887", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7684 attached , child_tidptr=0x5555563a5690) = 2642 [pid 7684] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7684] chdir("./887") = 0 [pid 7684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7684] setpgid(0, 0) = 0 [pid 7684] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7684] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7684] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7684] write(3, "1000", 4) = 4 [pid 7684] close(3) = 0 [pid 7684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7684] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7684] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7684] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7684] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7685 attached => {parent_tid=[2643]}, 88) = 2643 [pid 7685] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7684] rt_sigprocmask(SIG_SETMASK, [], [pid 7685] set_robust_list(0x7feeffcce9a0, 24 [pid 7684] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7685] <... set_robust_list resumed>) = 0 [pid 7684] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7684] <... futex resumed>) = 0 [pid 7684] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7685] memfd_create("syzkaller", 0) = 3 [pid 7685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7685] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7685] munmap(0x7feef78ae000, 2097152) = 0 [pid 7685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7685] close(3) = 0 [pid 7685] mkdir("./file0", 0777) = 0 [pid 7685] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7685] chdir("./file0") = 0 [pid 7685] ioctl(4, LOOP_CLR_FD) = 0 [pid 7685] close(4) = 0 [pid 7685] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7685] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7684] <... futex resumed>) = 0 [pid 7684] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7685] <... futex resumed>) = 0 [pid 7684] <... futex resumed>) = 1 [pid 7685] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7684] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7685] <... openat resumed>) = 4 [pid 7685] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7684] <... futex resumed>) = 0 [pid 7685] <... futex resumed>) = 1 [pid 7684] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7685] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7684] <... futex resumed>) = 0 [pid 7685] <... openat resumed>) = 5 [pid 7684] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7685] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7685] <... futex resumed>) = 0 [pid 7684] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7685] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7684] <... futex resumed>) = 0 [ 270.827046][ T7685] loop0: detected capacity change from 0 to 4096 [ 270.849463][ T7685] ntfs: volume version 3.1. [pid 7684] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7684] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7684] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7686 attached [pid 7686] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7684] <... clone3 resumed> => {parent_tid=[2644]}, 88) = 2644 [pid 7686] <... rseq resumed>) = 0 [pid 7684] rt_sigprocmask(SIG_SETMASK, [], [pid 7686] set_robust_list(0x7feef7aad9a0, 24 [pid 7684] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7686] <... set_robust_list resumed>) = 0 [pid 7684] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7684] <... futex resumed>) = 0 [pid 7684] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7686] ftruncate(4, 0) = 0 [pid 7686] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7685] <... write resumed>) = 1048064 [pid 7686] <... futex resumed>) = 1 [pid 7684] <... futex resumed>) = 0 [pid 7686] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7685] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7684] close(3 [pid 7685] <... futex resumed>) = 0 [pid 7684] <... close resumed>) = 0 [pid 7685] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7684] close(4) = 0 [pid 7684] close(5) = 0 [pid 7684] close(6) = -1 EBADF (Bad file descriptor) [pid 7684] close(7) = -1 EBADF (Bad file descriptor) [pid 7684] close(8) = -1 EBADF (Bad file descriptor) [pid 7684] close(9) = -1 EBADF (Bad file descriptor) [pid 7684] close(10) = -1 EBADF (Bad file descriptor) [pid 7684] close(11) = -1 EBADF (Bad file descriptor) [pid 7684] close(12) = -1 EBADF (Bad file descriptor) [pid 7684] close(13) = -1 EBADF (Bad file descriptor) [pid 7684] close(14) = -1 EBADF (Bad file descriptor) [pid 7684] close(15) = -1 EBADF (Bad file descriptor) [pid 7684] close(16) = -1 EBADF (Bad file descriptor) [pid 7684] close(17) = -1 EBADF (Bad file descriptor) [pid 7684] close(18) = -1 EBADF (Bad file descriptor) [pid 7684] close(19) = -1 EBADF (Bad file descriptor) [pid 7684] close(20) = -1 EBADF (Bad file descriptor) [pid 7684] close(21) = -1 EBADF (Bad file descriptor) [pid 7684] close(22) = -1 EBADF (Bad file descriptor) [pid 7684] close(23) = -1 EBADF (Bad file descriptor) [pid 7684] close(24) = -1 EBADF (Bad file descriptor) [pid 7684] close(25) = -1 EBADF (Bad file descriptor) [pid 7684] close(26) = -1 EBADF (Bad file descriptor) [pid 7684] close(27) = -1 EBADF (Bad file descriptor) [pid 7684] close(28) = -1 EBADF (Bad file descriptor) [pid 7684] close(29) = -1 EBADF (Bad file descriptor) [pid 7684] exit_group(0) = ? [pid 7685] <... futex resumed>) = ? [pid 7686] <... futex resumed>) = ? [pid 7685] +++ exited with 0 +++ [pid 7686] +++ exited with 0 +++ [pid 7684] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2642, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./887", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./887", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./887/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./887/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./887/cgroup.cpu") = 0 [pid 5028] umount2("./887/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./887/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./887/binderfs") = 0 [pid 5028] umount2("./887/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./887/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./887/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./887/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./887/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./887/file0") = 0 [pid 5028] umount2("./887/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./887/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./887/cgroup") = 0 [pid 5028] umount2("./887/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./887/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./887/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./887") = 0 [pid 5028] mkdir("./888", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7687 attached [pid 7687] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2645 [pid 7687] <... set_robust_list resumed>) = 0 [pid 7687] chdir("./888") = 0 [pid 7687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7687] setpgid(0, 0) = 0 [pid 7687] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7687] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7687] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7687] write(3, "1000", 4) = 4 [pid 7687] close(3) = 0 [pid 7687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7687] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7687] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7687] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7687] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7687] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2646]}, 88) = 2646 [pid 7687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7687] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7687] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7688 attached [pid 7688] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7688] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7688] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7688] memfd_create("syzkaller", 0) = 3 [pid 7688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7688] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7688] munmap(0x7feef78ae000, 2097152) = 0 [pid 7688] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7688] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7688] close(3) = 0 [pid 7688] mkdir("./file0", 0777) = 0 [pid 7688] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7688] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7688] chdir("./file0") = 0 [pid 7688] ioctl(4, LOOP_CLR_FD) = 0 [pid 7688] close(4) = 0 [pid 7688] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7687] <... futex resumed>) = 0 [pid 7687] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7687] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7688] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7688] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7688] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7687] <... futex resumed>) = 0 [pid 7687] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7687] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7688] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7688] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7688] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7687] <... futex resumed>) = 0 [pid 7687] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7688] <... futex resumed>) = 0 [pid 7687] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 271.067040][ T7688] loop0: detected capacity change from 0 to 4096 [ 271.087702][ T7688] ntfs: volume version 3.1. [pid 7688] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7687] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7687] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7687] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7687] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7687] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7689 attached [pid 7689] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7687] <... clone3 resumed> => {parent_tid=[2647]}, 88) = 2647 [pid 7687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7687] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7687] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7689] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7689] ftruncate(4, 0) = 0 [pid 7689] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7688] <... write resumed>) = 1048064 [pid 7689] <... futex resumed>) = 1 [pid 7688] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7687] <... futex resumed>) = 0 [pid 7689] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7688] <... futex resumed>) = 0 [pid 7687] close(3 [pid 7688] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7687] <... close resumed>) = 0 [pid 7687] close(4) = 0 [pid 7687] close(5) = 0 [pid 7687] close(6) = -1 EBADF (Bad file descriptor) [pid 7687] close(7) = -1 EBADF (Bad file descriptor) [pid 7687] close(8) = -1 EBADF (Bad file descriptor) [pid 7687] close(9) = -1 EBADF (Bad file descriptor) [pid 7687] close(10) = -1 EBADF (Bad file descriptor) [pid 7687] close(11) = -1 EBADF (Bad file descriptor) [pid 7687] close(12) = -1 EBADF (Bad file descriptor) [pid 7687] close(13) = -1 EBADF (Bad file descriptor) [pid 7687] close(14) = -1 EBADF (Bad file descriptor) [pid 7687] close(15) = -1 EBADF (Bad file descriptor) [pid 7687] close(16) = -1 EBADF (Bad file descriptor) [pid 7687] close(17) = -1 EBADF (Bad file descriptor) [pid 7687] close(18) = -1 EBADF (Bad file descriptor) [pid 7687] close(19) = -1 EBADF (Bad file descriptor) [pid 7687] close(20) = -1 EBADF (Bad file descriptor) [pid 7687] close(21) = -1 EBADF (Bad file descriptor) [pid 7687] close(22) = -1 EBADF (Bad file descriptor) [pid 7687] close(23) = -1 EBADF (Bad file descriptor) [pid 7687] close(24) = -1 EBADF (Bad file descriptor) [pid 7687] close(25) = -1 EBADF (Bad file descriptor) [pid 7687] close(26) = -1 EBADF (Bad file descriptor) [pid 7687] close(27) = -1 EBADF (Bad file descriptor) [pid 7687] close(28) = -1 EBADF (Bad file descriptor) [pid 7687] close(29) = -1 EBADF (Bad file descriptor) [pid 7687] exit_group(0) = ? [pid 7688] <... futex resumed>) = ? [pid 7689] <... futex resumed>) = ? [pid 7688] +++ exited with 0 +++ [pid 7689] +++ exited with 0 +++ [pid 7687] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2645, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5028] umount2("./888", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./888", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./888/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./888/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./888/cgroup.cpu") = 0 [pid 5028] umount2("./888/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./888/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./888/binderfs") = 0 [pid 5028] umount2("./888/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./888/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./888/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./888/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./888/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./888/file0") = 0 [pid 5028] umount2("./888/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./888/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./888/cgroup") = 0 [pid 5028] umount2("./888/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./888/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./888/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./888") = 0 [pid 5028] mkdir("./889", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2648 ./strace-static-x86_64: Process 7690 attached [pid 7690] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7690] chdir("./889") = 0 [pid 7690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7690] setpgid(0, 0) = 0 [pid 7690] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7690] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7690] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7690] write(3, "1000", 4) = 4 [pid 7690] close(3) = 0 [pid 7690] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7690] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7690] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7690] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7691 attached [pid 7691] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7690] <... clone3 resumed> => {parent_tid=[2649]}, 88) = 2649 [pid 7691] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7690] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7690] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7691] memfd_create("syzkaller", 0) = 3 [pid 7691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7691] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7691] munmap(0x7feef78ae000, 2097152) = 0 [pid 7691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7691] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7691] close(3) = 0 [pid 7691] mkdir("./file0", 0777) = 0 [pid 7691] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7691] chdir("./file0") = 0 [pid 7691] ioctl(4, LOOP_CLR_FD) = 0 [pid 7691] close(4) = 0 [pid 7691] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7691] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7690] <... futex resumed>) = 0 [pid 7690] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7691] <... futex resumed>) = 0 [pid 7690] <... futex resumed>) = 1 [pid 7691] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7690] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7691] <... openat resumed>) = 4 [pid 7691] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7691] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7690] <... futex resumed>) = 0 [pid 7690] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7691] <... futex resumed>) = 0 [pid 7690] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7691] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7691] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7690] <... futex resumed>) = 0 [pid 7691] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7690] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7691] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7690] <... futex resumed>) = 0 [ 271.293423][ T7691] loop0: detected capacity change from 0 to 4096 [ 271.314657][ T7691] ntfs: volume version 3.1. [pid 7690] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7690] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7690] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7692 attached [pid 7692] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7690] <... clone3 resumed> => {parent_tid=[2650]}, 88) = 2650 [pid 7690] rt_sigprocmask(SIG_SETMASK, [], [pid 7692] <... rseq resumed>) = 0 [pid 7692] set_robust_list(0x7feef7aad9a0, 24 [pid 7690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7692] <... set_robust_list resumed>) = 0 [pid 7690] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] rt_sigprocmask(SIG_SETMASK, [], [pid 7690] <... futex resumed>) = 0 [pid 7692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7690] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7692] ftruncate(4, 0) = 0 [pid 7692] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7691] <... write resumed>) = 1048064 [pid 7692] <... futex resumed>) = 1 [pid 7690] <... futex resumed>) = 0 [pid 7691] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7692] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7691] <... futex resumed>) = 0 [pid 7690] close(3 [pid 7691] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7690] <... close resumed>) = 0 [pid 7690] close(4) = 0 [pid 7690] close(5) = 0 [pid 7690] close(6) = -1 EBADF (Bad file descriptor) [pid 7690] close(7) = -1 EBADF (Bad file descriptor) [pid 7690] close(8) = -1 EBADF (Bad file descriptor) [pid 7690] close(9) = -1 EBADF (Bad file descriptor) [pid 7690] close(10) = -1 EBADF (Bad file descriptor) [pid 7690] close(11) = -1 EBADF (Bad file descriptor) [pid 7690] close(12) = -1 EBADF (Bad file descriptor) [pid 7690] close(13) = -1 EBADF (Bad file descriptor) [pid 7690] close(14) = -1 EBADF (Bad file descriptor) [pid 7690] close(15) = -1 EBADF (Bad file descriptor) [pid 7690] close(16) = -1 EBADF (Bad file descriptor) [pid 7690] close(17) = -1 EBADF (Bad file descriptor) [pid 7690] close(18) = -1 EBADF (Bad file descriptor) [pid 7690] close(19) = -1 EBADF (Bad file descriptor) [pid 7690] close(20) = -1 EBADF (Bad file descriptor) [pid 7690] close(21) = -1 EBADF (Bad file descriptor) [pid 7690] close(22) = -1 EBADF (Bad file descriptor) [pid 7690] close(23) = -1 EBADF (Bad file descriptor) [pid 7690] close(24) = -1 EBADF (Bad file descriptor) [pid 7690] close(25) = -1 EBADF (Bad file descriptor) [pid 7690] close(26) = -1 EBADF (Bad file descriptor) [pid 7690] close(27) = -1 EBADF (Bad file descriptor) [pid 7690] close(28) = -1 EBADF (Bad file descriptor) [pid 7690] close(29) = -1 EBADF (Bad file descriptor) [pid 7690] exit_group(0) = ? [pid 7691] <... futex resumed>) = ? [pid 7692] <... futex resumed>) = ? [pid 7691] +++ exited with 0 +++ [pid 7692] +++ exited with 0 +++ [pid 7690] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2648, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./889", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./889", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./889/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./889/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./889/cgroup.cpu") = 0 [pid 5028] umount2("./889/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./889/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./889/binderfs") = 0 [pid 5028] umount2("./889/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./889/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./889/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./889/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./889/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./889/file0") = 0 [pid 5028] umount2("./889/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./889/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./889/cgroup") = 0 [pid 5028] umount2("./889/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./889/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./889/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./889") = 0 [pid 5028] mkdir("./890", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7693 attached , child_tidptr=0x5555563a5690) = 2651 [pid 7693] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7693] chdir("./890") = 0 [pid 7693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7693] setpgid(0, 0) = 0 [pid 7693] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7693] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7693] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7693] write(3, "1000", 4) = 4 [pid 7693] close(3) = 0 [pid 7693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7693] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7693] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7693] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2652]}, 88) = 2652 [pid 7693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7693] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7693] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7694 attached [pid 7694] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7694] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7694] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7694] memfd_create("syzkaller", 0) = 3 [pid 7694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7694] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7694] munmap(0x7feef78ae000, 2097152) = 0 [pid 7694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7694] close(3) = 0 [pid 7694] mkdir("./file0", 0777) = 0 [pid 7694] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7694] chdir("./file0") = 0 [pid 7694] ioctl(4, LOOP_CLR_FD) = 0 [pid 7694] close(4) = 0 [pid 7694] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7694] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7693] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7694] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7693] <... futex resumed>) = 0 [pid 7693] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7694] <... openat resumed>) = 4 [pid 7694] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7694] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7693] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7693] <... futex resumed>) = 0 [pid 7693] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7694] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7694] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7693] <... futex resumed>) = 0 [pid 7694] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7693] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7693] <... futex resumed>) = 0 [pid 7693] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 271.517960][ T7694] loop0: detected capacity change from 0 to 4096 [ 271.540503][ T7694] ntfs: volume version 3.1. [pid 7694] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7693] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7693] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7695 attached [pid 7695] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7693] <... clone3 resumed> => {parent_tid=[2653]}, 88) = 2653 [pid 7695] set_robust_list(0x7feef7aad9a0, 24 [pid 7693] rt_sigprocmask(SIG_SETMASK, [], [pid 7695] <... set_robust_list resumed>) = 0 [pid 7693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7695] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7693] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7695] ftruncate(4, 0 [pid 7693] <... futex resumed>) = 0 [pid 7695] <... ftruncate resumed>) = 0 [pid 7693] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7695] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7694] <... write resumed>) = 1048064 [pid 7695] <... futex resumed>) = 0 [pid 7693] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7694] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7694] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7695] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7693] close(3) = 0 [pid 7693] close(4) = 0 [pid 7693] close(5) = 0 [pid 7693] close(6) = -1 EBADF (Bad file descriptor) [pid 7693] close(7) = -1 EBADF (Bad file descriptor) [pid 7693] close(8) = -1 EBADF (Bad file descriptor) [pid 7693] close(9) = -1 EBADF (Bad file descriptor) [pid 7693] close(10) = -1 EBADF (Bad file descriptor) [pid 7693] close(11) = -1 EBADF (Bad file descriptor) [pid 7693] close(12) = -1 EBADF (Bad file descriptor) [pid 7693] close(13) = -1 EBADF (Bad file descriptor) [pid 7693] close(14) = -1 EBADF (Bad file descriptor) [pid 7693] close(15) = -1 EBADF (Bad file descriptor) [pid 7693] close(16) = -1 EBADF (Bad file descriptor) [pid 7693] close(17) = -1 EBADF (Bad file descriptor) [pid 7693] close(18) = -1 EBADF (Bad file descriptor) [pid 7693] close(19) = -1 EBADF (Bad file descriptor) [pid 7693] close(20) = -1 EBADF (Bad file descriptor) [pid 7693] close(21) = -1 EBADF (Bad file descriptor) [pid 7693] close(22) = -1 EBADF (Bad file descriptor) [pid 7693] close(23) = -1 EBADF (Bad file descriptor) [pid 7693] close(24) = -1 EBADF (Bad file descriptor) [pid 7693] close(25) = -1 EBADF (Bad file descriptor) [pid 7693] close(26) = -1 EBADF (Bad file descriptor) [pid 7693] close(27) = -1 EBADF (Bad file descriptor) [pid 7693] close(28) = -1 EBADF (Bad file descriptor) [pid 7693] close(29) = -1 EBADF (Bad file descriptor) [pid 7693] exit_group(0) = ? [pid 7694] <... futex resumed>) = ? [pid 7695] <... futex resumed>) = ? [pid 7694] +++ exited with 0 +++ [pid 7695] +++ exited with 0 +++ [pid 7693] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2651, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./890", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./890", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./890/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./890/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./890/cgroup.cpu") = 0 [pid 5028] umount2("./890/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./890/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./890/binderfs") = 0 [pid 5028] umount2("./890/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./890/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./890/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./890/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./890/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./890/file0") = 0 [pid 5028] umount2("./890/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./890/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./890/cgroup") = 0 [pid 5028] umount2("./890/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./890/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./890/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./890") = 0 [pid 5028] mkdir("./891", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2654 ./strace-static-x86_64: Process 7696 attached [pid 7696] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7696] chdir("./891") = 0 [pid 7696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7696] setpgid(0, 0) = 0 [pid 7696] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7696] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7696] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7696] write(3, "1000", 4) = 4 [pid 7696] close(3) = 0 [pid 7696] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7696] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7696] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7696] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7696] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7696] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7697 attached => {parent_tid=[2655]}, 88) = 2655 [pid 7696] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7696] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7697] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7696] <... futex resumed>) = 0 [pid 7697] <... rseq resumed>) = 0 [pid 7697] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7696] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7697] memfd_create("syzkaller", 0) = 3 [pid 7697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7697] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7697] munmap(0x7feef78ae000, 2097152) = 0 [pid 7697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7697] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7697] close(3) = 0 [pid 7697] mkdir("./file0", 0777) = 0 [pid 7697] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7697] chdir("./file0") = 0 [pid 7697] ioctl(4, LOOP_CLR_FD) = 0 [pid 7697] close(4) = 0 [pid 7697] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7696] <... futex resumed>) = 0 [pid 7697] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7696] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7696] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7697] <... openat resumed>) = 4 [pid 7697] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7696] <... futex resumed>) = 0 [pid 7697] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7696] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7696] <... futex resumed>) = 0 [pid 7697] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7696] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7697] <... openat resumed>) = 5 [pid 7697] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7696] <... futex resumed>) = 0 [pid 7697] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7696] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7696] <... futex resumed>) = 0 [pid 7697] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 271.749529][ T7697] loop0: detected capacity change from 0 to 4096 [ 271.771238][ T7697] ntfs: volume version 3.1. [pid 7696] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7696] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7696] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7696] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7696] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7696] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7698 attached [pid 7698] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7696] <... clone3 resumed> => {parent_tid=[2656]}, 88) = 2656 [pid 7698] set_robust_list(0x7feef7aad9a0, 24 [pid 7696] rt_sigprocmask(SIG_SETMASK, [], [pid 7698] <... set_robust_list resumed>) = 0 [pid 7698] rt_sigprocmask(SIG_SETMASK, [], [pid 7696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7696] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7698] ftruncate(4, 0 [pid 7696] <... futex resumed>) = 0 [pid 7696] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7698] <... ftruncate resumed>) = 0 [pid 7697] <... write resumed>) = 1048064 [pid 7698] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7697] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7698] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7696] <... futex resumed>) = 0 [pid 7697] <... futex resumed>) = 0 [pid 7696] close(3 [pid 7697] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7696] <... close resumed>) = 0 [pid 7696] close(4) = 0 [pid 7696] close(5) = 0 [pid 7696] close(6) = -1 EBADF (Bad file descriptor) [pid 7696] close(7) = -1 EBADF (Bad file descriptor) [pid 7696] close(8) = -1 EBADF (Bad file descriptor) [pid 7696] close(9) = -1 EBADF (Bad file descriptor) [pid 7696] close(10) = -1 EBADF (Bad file descriptor) [pid 7696] close(11) = -1 EBADF (Bad file descriptor) [pid 7696] close(12) = -1 EBADF (Bad file descriptor) [pid 7696] close(13) = -1 EBADF (Bad file descriptor) [pid 7696] close(14) = -1 EBADF (Bad file descriptor) [pid 7696] close(15) = -1 EBADF (Bad file descriptor) [pid 7696] close(16) = -1 EBADF (Bad file descriptor) [pid 7696] close(17) = -1 EBADF (Bad file descriptor) [pid 7696] close(18) = -1 EBADF (Bad file descriptor) [pid 7696] close(19) = -1 EBADF (Bad file descriptor) [pid 7696] close(20) = -1 EBADF (Bad file descriptor) [pid 7696] close(21) = -1 EBADF (Bad file descriptor) [pid 7696] close(22) = -1 EBADF (Bad file descriptor) [pid 7696] close(23) = -1 EBADF (Bad file descriptor) [pid 7696] close(24) = -1 EBADF (Bad file descriptor) [pid 7696] close(25) = -1 EBADF (Bad file descriptor) [pid 7696] close(26) = -1 EBADF (Bad file descriptor) [pid 7696] close(27) = -1 EBADF (Bad file descriptor) [pid 7696] close(28) = -1 EBADF (Bad file descriptor) [pid 7696] close(29) = -1 EBADF (Bad file descriptor) [pid 7696] exit_group(0 [pid 7698] <... futex resumed>) = ? [pid 7698] +++ exited with 0 +++ [pid 7697] <... futex resumed>) = ? [pid 7696] <... exit_group resumed>) = ? [pid 7697] +++ exited with 0 +++ [pid 7696] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2654, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./891", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./891", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./891/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./891/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./891/cgroup.cpu") = 0 [pid 5028] umount2("./891/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./891/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./891/binderfs") = 0 [pid 5028] umount2("./891/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./891/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./891/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./891/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./891/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./891/file0") = 0 [pid 5028] umount2("./891/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./891/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./891/cgroup") = 0 [pid 5028] umount2("./891/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./891/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./891/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./891") = 0 [pid 5028] mkdir("./892", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7699 attached [pid 7699] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2657 [pid 7699] <... set_robust_list resumed>) = 0 [pid 7699] chdir("./892") = 0 [pid 7699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7699] setpgid(0, 0) = 0 [pid 7699] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7699] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7699] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7699] write(3, "1000", 4) = 4 [pid 7699] close(3) = 0 [pid 7699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7699] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7699] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7699] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7699] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7699] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2658]}, 88) = 2658 ./strace-static-x86_64: Process 7700 attached [pid 7699] rt_sigprocmask(SIG_SETMASK, [], [pid 7700] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7700] <... rseq resumed>) = 0 [pid 7699] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7699] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7700] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7700] memfd_create("syzkaller", 0) = 3 [pid 7700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7700] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7700] munmap(0x7feef78ae000, 2097152) = 0 [pid 7700] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7700] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7700] close(3) = 0 [pid 7700] mkdir("./file0", 0777) = 0 [pid 7700] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7700] chdir("./file0") = 0 [pid 7700] ioctl(4, LOOP_CLR_FD) = 0 [pid 7700] close(4) = 0 [pid 7700] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7700] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7699] <... futex resumed>) = 0 [pid 7699] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7700] <... futex resumed>) = 0 [pid 7699] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7700] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7700] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7699] <... futex resumed>) = 0 [pid 7700] <... futex resumed>) = 1 [pid 7699] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7699] <... futex resumed>) = 0 [pid 7700] <... openat resumed>) = 5 [pid 7699] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7700] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7699] <... futex resumed>) = 0 [pid 7699] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7699] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7700] <... futex resumed>) = 1 [ 271.983922][ T7700] loop0: detected capacity change from 0 to 4096 [ 272.006819][ T7700] ntfs: volume version 3.1. [pid 7700] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7699] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7699] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7699] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7699] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7701 attached => {parent_tid=[2659]}, 88) = 2659 [pid 7701] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7699] rt_sigprocmask(SIG_SETMASK, [], [pid 7701] set_robust_list(0x7feef7aad9a0, 24 [pid 7699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7701] <... set_robust_list resumed>) = 0 [pid 7699] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7701] rt_sigprocmask(SIG_SETMASK, [], [pid 7699] <... futex resumed>) = 0 [pid 7701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7699] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7701] ftruncate(4, 0) = 0 [pid 7701] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7700] <... write resumed>) = 1048064 [pid 7701] <... futex resumed>) = 1 [pid 7700] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7701] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7700] <... futex resumed>) = 0 [pid 7699] <... futex resumed>) = 0 [pid 7699] close(3) = 0 [pid 7699] close(4) = 0 [pid 7699] close(5 [pid 7700] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7699] <... close resumed>) = 0 [pid 7699] close(6) = -1 EBADF (Bad file descriptor) [pid 7699] close(7) = -1 EBADF (Bad file descriptor) [pid 7699] close(8) = -1 EBADF (Bad file descriptor) [pid 7699] close(9) = -1 EBADF (Bad file descriptor) [pid 7699] close(10) = -1 EBADF (Bad file descriptor) [pid 7699] close(11) = -1 EBADF (Bad file descriptor) [pid 7699] close(12) = -1 EBADF (Bad file descriptor) [pid 7699] close(13) = -1 EBADF (Bad file descriptor) [pid 7699] close(14) = -1 EBADF (Bad file descriptor) [pid 7699] close(15) = -1 EBADF (Bad file descriptor) [pid 7699] close(16) = -1 EBADF (Bad file descriptor) [pid 7699] close(17) = -1 EBADF (Bad file descriptor) [pid 7699] close(18) = -1 EBADF (Bad file descriptor) [pid 7699] close(19) = -1 EBADF (Bad file descriptor) [pid 7699] close(20) = -1 EBADF (Bad file descriptor) [pid 7699] close(21) = -1 EBADF (Bad file descriptor) [pid 7699] close(22) = -1 EBADF (Bad file descriptor) [pid 7699] close(23) = -1 EBADF (Bad file descriptor) [pid 7699] close(24) = -1 EBADF (Bad file descriptor) [pid 7699] close(25) = -1 EBADF (Bad file descriptor) [pid 7699] close(26) = -1 EBADF (Bad file descriptor) [pid 7699] close(27) = -1 EBADF (Bad file descriptor) [pid 7699] close(28) = -1 EBADF (Bad file descriptor) [pid 7699] close(29) = -1 EBADF (Bad file descriptor) [pid 7699] exit_group(0 [pid 7701] <... futex resumed>) = ? [pid 7700] <... futex resumed>) = ? [pid 7701] +++ exited with 0 +++ [pid 7699] <... exit_group resumed>) = ? [pid 7700] +++ exited with 0 +++ [pid 7699] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2657, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./892", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./892", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./892/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./892/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./892/cgroup.cpu") = 0 [pid 5028] umount2("./892/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./892/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./892/binderfs") = 0 [pid 5028] umount2("./892/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./892/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./892/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./892/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./892/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./892/file0") = 0 [pid 5028] umount2("./892/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./892/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./892/cgroup") = 0 [pid 5028] umount2("./892/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./892/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./892/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./892") = 0 [pid 5028] mkdir("./893", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2660 ./strace-static-x86_64: Process 7702 attached [pid 7702] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7702] chdir("./893") = 0 [pid 7702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7702] setpgid(0, 0) = 0 [pid 7702] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7702] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7702] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7702] write(3, "1000", 4) = 4 [pid 7702] close(3) = 0 [pid 7702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7702] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7702] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7702] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7702] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7702] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7703 attached => {parent_tid=[2661]}, 88) = 2661 [pid 7703] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7702] rt_sigprocmask(SIG_SETMASK, [], [pid 7703] <... rseq resumed>) = 0 [pid 7702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7703] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7702] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7702] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7703] memfd_create("syzkaller", 0) = 3 [pid 7703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7703] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7703] munmap(0x7feef78ae000, 2097152) = 0 [pid 7703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7703] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7703] close(3) = 0 [pid 7703] mkdir("./file0", 0777) = 0 [pid 7703] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7703] chdir("./file0") = 0 [pid 7703] ioctl(4, LOOP_CLR_FD) = 0 [pid 7703] close(4) = 0 [pid 7703] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7702] <... futex resumed>) = 0 [pid 7703] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7702] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7702] <... futex resumed>) = 0 [pid 7703] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7702] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7703] <... openat resumed>) = 4 [pid 7703] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7702] <... futex resumed>) = 0 [pid 7703] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7702] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7702] <... futex resumed>) = 0 [pid 7703] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7702] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7703] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7703] <... futex resumed>) = 0 [pid 7703] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7702] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 272.222088][ T7703] loop0: detected capacity change from 0 to 4096 [ 272.242957][ T7703] ntfs: volume version 3.1. [pid 7702] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7702] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7702] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7702] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7702] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7704 attached [pid 7704] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7702] <... clone3 resumed> => {parent_tid=[2662]}, 88) = 2662 [pid 7702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7702] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7702] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7704] <... rseq resumed>) = 0 [pid 7704] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7704] ftruncate(4, 0) = 0 [pid 7703] <... write resumed>) = 1048064 [pid 7703] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7703] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7704] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7702] <... futex resumed>) = 0 [pid 7704] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7702] close(3) = 0 [pid 7702] close(4) = 0 [pid 7702] close(5) = 0 [pid 7702] close(6) = -1 EBADF (Bad file descriptor) [pid 7702] close(7) = -1 EBADF (Bad file descriptor) [pid 7702] close(8) = -1 EBADF (Bad file descriptor) [pid 7702] close(9) = -1 EBADF (Bad file descriptor) [pid 7702] close(10) = -1 EBADF (Bad file descriptor) [pid 7702] close(11) = -1 EBADF (Bad file descriptor) [pid 7702] close(12) = -1 EBADF (Bad file descriptor) [pid 7702] close(13) = -1 EBADF (Bad file descriptor) [pid 7702] close(14) = -1 EBADF (Bad file descriptor) [pid 7702] close(15) = -1 EBADF (Bad file descriptor) [pid 7702] close(16) = -1 EBADF (Bad file descriptor) [pid 7702] close(17) = -1 EBADF (Bad file descriptor) [pid 7702] close(18) = -1 EBADF (Bad file descriptor) [pid 7702] close(19) = -1 EBADF (Bad file descriptor) [pid 7702] close(20) = -1 EBADF (Bad file descriptor) [pid 7702] close(21) = -1 EBADF (Bad file descriptor) [pid 7702] close(22) = -1 EBADF (Bad file descriptor) [pid 7702] close(23) = -1 EBADF (Bad file descriptor) [pid 7702] close(24) = -1 EBADF (Bad file descriptor) [pid 7702] close(25) = -1 EBADF (Bad file descriptor) [pid 7702] close(26) = -1 EBADF (Bad file descriptor) [pid 7702] close(27) = -1 EBADF (Bad file descriptor) [pid 7702] close(28) = -1 EBADF (Bad file descriptor) [pid 7702] close(29) = -1 EBADF (Bad file descriptor) [pid 7702] exit_group(0) = ? [pid 7703] <... futex resumed>) = ? [pid 7704] <... futex resumed>) = ? [pid 7703] +++ exited with 0 +++ [pid 7704] +++ exited with 0 +++ [pid 7702] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2660, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./893", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./893", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./893/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./893/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./893/cgroup.cpu") = 0 [pid 5028] umount2("./893/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./893/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./893/binderfs") = 0 [pid 5028] umount2("./893/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./893/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./893/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./893/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./893/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./893/file0") = 0 [pid 5028] umount2("./893/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./893/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./893/cgroup") = 0 [pid 5028] umount2("./893/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./893/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./893/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./893") = 0 [pid 5028] mkdir("./894", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7705 attached , child_tidptr=0x5555563a5690) = 2663 [pid 7705] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7705] chdir("./894") = 0 [pid 7705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7705] setpgid(0, 0) = 0 [pid 7705] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7705] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7705] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7705] write(3, "1000", 4) = 4 [pid 7705] close(3) = 0 [pid 7705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7705] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7705] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7705] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7705] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7705] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7706 attached [pid 7706] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7705] <... clone3 resumed> => {parent_tid=[2664]}, 88) = 2664 [pid 7706] <... rseq resumed>) = 0 [pid 7705] rt_sigprocmask(SIG_SETMASK, [], [pid 7706] set_robust_list(0x7feeffcce9a0, 24 [pid 7705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7706] <... set_robust_list resumed>) = 0 [pid 7705] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] rt_sigprocmask(SIG_SETMASK, [], [pid 7705] <... futex resumed>) = 0 [pid 7706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7705] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7706] memfd_create("syzkaller", 0) = 3 [pid 7706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7706] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7706] munmap(0x7feef78ae000, 2097152) = 0 [pid 7706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7706] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7706] close(3) = 0 [pid 7706] mkdir("./file0", 0777) = 0 [ 272.443366][ T7706] loop0: detected capacity change from 0 to 4096 [ 272.452463][ T7706] __ntfs_warning: 11 callbacks suppressed [ 272.452476][ T7706] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7706] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7706] chdir("./file0") = 0 [pid 7706] ioctl(4, LOOP_CLR_FD) = 0 [pid 7706] close(4) = 0 [pid 7706] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7705] <... futex resumed>) = 0 [pid 7706] <... futex resumed>) = 1 [pid 7705] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7706] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7705] <... futex resumed>) = 0 [pid 7705] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7706] <... openat resumed>) = 4 [pid 7706] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7705] <... futex resumed>) = 0 [pid 7705] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7706] <... futex resumed>) = 1 [pid 7705] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7706] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7706] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7705] <... futex resumed>) = 0 [pid 7705] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7705] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7706] <... futex resumed>) = 1 [ 272.491314][ T7706] ntfs: volume version 3.1. [pid 7706] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7705] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7705] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7705] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7705] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7707 attached [pid 7707] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7707] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7707] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7705] <... clone3 resumed> => {parent_tid=[2665]}, 88) = 2665 [pid 7705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7705] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7707] <... futex resumed>) = 0 [pid 7705] <... futex resumed>) = 1 [pid 7707] ftruncate(4, 0 [pid 7705] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7707] <... ftruncate resumed>) = 0 [pid 7707] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7706] <... write resumed>) = 1048064 [pid 7706] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7707] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7706] <... futex resumed>) = 0 [pid 7705] <... futex resumed>) = 0 [pid 7706] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7705] close(3) = 0 [pid 7705] close(4) = 0 [pid 7705] close(5) = 0 [pid 7705] close(6) = -1 EBADF (Bad file descriptor) [pid 7705] close(7) = -1 EBADF (Bad file descriptor) [pid 7705] close(8) = -1 EBADF (Bad file descriptor) [pid 7705] close(9) = -1 EBADF (Bad file descriptor) [pid 7705] close(10) = -1 EBADF (Bad file descriptor) [pid 7705] close(11) = -1 EBADF (Bad file descriptor) [pid 7705] close(12) = -1 EBADF (Bad file descriptor) [pid 7705] close(13) = -1 EBADF (Bad file descriptor) [pid 7705] close(14) = -1 EBADF (Bad file descriptor) [pid 7705] close(15) = -1 EBADF (Bad file descriptor) [pid 7705] close(16) = -1 EBADF (Bad file descriptor) [pid 7705] close(17) = -1 EBADF (Bad file descriptor) [pid 7705] close(18) = -1 EBADF (Bad file descriptor) [pid 7705] close(19) = -1 EBADF (Bad file descriptor) [pid 7705] close(20) = -1 EBADF (Bad file descriptor) [pid 7705] close(21) = -1 EBADF (Bad file descriptor) [pid 7705] close(22) = -1 EBADF (Bad file descriptor) [pid 7705] close(23) = -1 EBADF (Bad file descriptor) [pid 7705] close(24) = -1 EBADF (Bad file descriptor) [pid 7705] close(25) = -1 EBADF (Bad file descriptor) [pid 7705] close(26) = -1 EBADF (Bad file descriptor) [pid 7705] close(27) = -1 EBADF (Bad file descriptor) [pid 7705] close(28) = -1 EBADF (Bad file descriptor) [pid 7705] close(29) = -1 EBADF (Bad file descriptor) [pid 7705] exit_group(0 [pid 7707] <... futex resumed>) = ? [pid 7705] <... exit_group resumed>) = ? [pid 7707] +++ exited with 0 +++ [pid 7706] <... futex resumed>) = ? [pid 7706] +++ exited with 0 +++ [pid 7705] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2663, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./894", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./894", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./894/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./894/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./894/cgroup.cpu") = 0 [pid 5028] umount2("./894/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./894/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./894/binderfs") = 0 [pid 5028] umount2("./894/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./894/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./894/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./894/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./894/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./894/file0") = 0 [pid 5028] umount2("./894/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./894/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./894/cgroup") = 0 [pid 5028] umount2("./894/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./894/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./894/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./894") = 0 [pid 5028] mkdir("./895", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7708 attached [pid 7708] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7708] chdir("./895" [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2666 [pid 7708] <... chdir resumed>) = 0 [pid 7708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7708] setpgid(0, 0) = 0 [pid 7708] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7708] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7708] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7708] write(3, "1000", 4) = 4 [pid 7708] close(3) = 0 [pid 7708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7708] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7708] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7708] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7708] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7708] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7709 attached [pid 7709] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7708] <... clone3 resumed> => {parent_tid=[2667]}, 88) = 2667 [pid 7709] <... rseq resumed>) = 0 [pid 7708] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7708] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7708] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7709] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7709] memfd_create("syzkaller", 0) = 3 [pid 7709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7709] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7709] munmap(0x7feef78ae000, 2097152) = 0 [pid 7709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7709] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7709] close(3) = 0 [pid 7709] mkdir("./file0", 0777) = 0 [pid 7709] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7709] chdir("./file0") = 0 [pid 7709] ioctl(4, LOOP_CLR_FD) = 0 [pid 7709] close(4) = 0 [pid 7709] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7708] <... futex resumed>) = 0 [pid 7709] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7708] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7708] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7709] <... futex resumed>) = 0 [pid 7709] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7709] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7709] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7708] <... futex resumed>) = 0 [pid 7708] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7709] <... futex resumed>) = 0 [pid 7708] <... futex resumed>) = 1 [pid 7709] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7708] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7709] <... openat resumed>) = 5 [pid 7709] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7708] <... futex resumed>) = 0 [pid 7709] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7708] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7708] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 272.700888][ T7709] loop0: detected capacity change from 0 to 4096 [ 272.709780][ T7709] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 272.742966][ T7709] ntfs: volume version 3.1. [pid 7709] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7708] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7708] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7708] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7710 attached => {parent_tid=[2668]}, 88) = 2668 [pid 7710] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7708] rt_sigprocmask(SIG_SETMASK, [], [pid 7710] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7708] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7710] ftruncate(4, 0 [pid 7708] <... futex resumed>) = 0 [pid 7708] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7710] <... ftruncate resumed>) = 0 [pid 7710] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7709] <... write resumed>) = 1048064 [pid 7710] <... futex resumed>) = 1 [pid 7709] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7708] <... futex resumed>) = 0 [pid 7710] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7709] <... futex resumed>) = 0 [pid 7709] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7708] close(3) = 0 [pid 7708] close(4) = 0 [pid 7708] close(5) = 0 [pid 7708] close(6) = -1 EBADF (Bad file descriptor) [pid 7708] close(7) = -1 EBADF (Bad file descriptor) [pid 7708] close(8) = -1 EBADF (Bad file descriptor) [pid 7708] close(9) = -1 EBADF (Bad file descriptor) [pid 7708] close(10) = -1 EBADF (Bad file descriptor) [pid 7708] close(11) = -1 EBADF (Bad file descriptor) [pid 7708] close(12) = -1 EBADF (Bad file descriptor) [pid 7708] close(13) = -1 EBADF (Bad file descriptor) [pid 7708] close(14) = -1 EBADF (Bad file descriptor) [pid 7708] close(15) = -1 EBADF (Bad file descriptor) [pid 7708] close(16) = -1 EBADF (Bad file descriptor) [pid 7708] close(17) = -1 EBADF (Bad file descriptor) [pid 7708] close(18) = -1 EBADF (Bad file descriptor) [pid 7708] close(19) = -1 EBADF (Bad file descriptor) [pid 7708] close(20) = -1 EBADF (Bad file descriptor) [pid 7708] close(21) = -1 EBADF (Bad file descriptor) [pid 7708] close(22) = -1 EBADF (Bad file descriptor) [pid 7708] close(23) = -1 EBADF (Bad file descriptor) [pid 7708] close(24) = -1 EBADF (Bad file descriptor) [pid 7708] close(25) = -1 EBADF (Bad file descriptor) [pid 7708] close(26) = -1 EBADF (Bad file descriptor) [pid 7708] close(27) = -1 EBADF (Bad file descriptor) [pid 7708] close(28) = -1 EBADF (Bad file descriptor) [pid 7708] close(29) = -1 EBADF (Bad file descriptor) [pid 7708] exit_group(0) = ? [pid 7710] <... futex resumed>) = ? [pid 7709] <... futex resumed>) = ? [pid 7710] +++ exited with 0 +++ [pid 7709] +++ exited with 0 +++ [pid 7708] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2666, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./895", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./895", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./895/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./895/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./895/cgroup.cpu") = 0 [pid 5028] umount2("./895/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./895/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./895/binderfs") = 0 [pid 5028] umount2("./895/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./895/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./895/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./895/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./895/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./895/file0") = 0 [pid 5028] umount2("./895/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./895/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./895/cgroup") = 0 [pid 5028] umount2("./895/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./895/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./895/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./895") = 0 [pid 5028] mkdir("./896", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2669 ./strace-static-x86_64: Process 7711 attached [pid 7711] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7711] chdir("./896") = 0 [pid 7711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7711] setpgid(0, 0) = 0 [pid 7711] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7711] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7711] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7711] write(3, "1000", 4) = 4 [pid 7711] close(3) = 0 [pid 7711] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7711] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7711] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7711] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7711] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7711] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7711] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2670]}, 88) = 2670 ./strace-static-x86_64: Process 7712 attached [pid 7711] rt_sigprocmask(SIG_SETMASK, [], [pid 7712] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7711] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7712] set_robust_list(0x7feeffcce9a0, 24 [pid 7711] <... futex resumed>) = 0 [pid 7712] <... set_robust_list resumed>) = 0 [pid 7712] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7711] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7712] memfd_create("syzkaller", 0) = 3 [pid 7712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7712] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7712] munmap(0x7feef78ae000, 2097152) = 0 [pid 7712] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7712] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7712] close(3) = 0 [pid 7712] mkdir("./file0", 0777) = 0 [pid 7712] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7712] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7712] chdir("./file0") = 0 [pid 7712] ioctl(4, LOOP_CLR_FD) = 0 [pid 7712] close(4) = 0 [pid 7712] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7711] <... futex resumed>) = 0 [pid 7712] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7711] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7711] <... futex resumed>) = 0 [pid 7712] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7711] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7712] <... openat resumed>) = 4 [pid 7712] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7711] <... futex resumed>) = 0 [pid 7712] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7711] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7711] <... futex resumed>) = 0 [pid 7712] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7711] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7712] <... openat resumed>) = 5 [pid 7712] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7711] <... futex resumed>) = 0 [pid 7712] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7711] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7711] <... futex resumed>) = 0 [pid 7712] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 272.960249][ T7712] loop0: detected capacity change from 0 to 4096 [ 272.969069][ T7712] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 273.001672][ T7712] ntfs: volume version 3.1. [pid 7711] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7711] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7711] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7711] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7711] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7711] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} [pid 7712] <... write resumed>) = 1048064 [pid 7712] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7712] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7713 attached [pid 7713] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7711] <... clone3 resumed> => {parent_tid=[2671]}, 88) = 2671 [pid 7713] <... rseq resumed>) = 0 [pid 7711] rt_sigprocmask(SIG_SETMASK, [], [pid 7713] set_robust_list(0x7feef7aad9a0, 24 [pid 7711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7713] <... set_robust_list resumed>) = 0 [pid 7711] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7713] rt_sigprocmask(SIG_SETMASK, [], [pid 7711] <... futex resumed>) = 0 [pid 7713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7711] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7713] ftruncate(4, 0) = 0 [pid 7713] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7711] <... futex resumed>) = 0 [pid 7713] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7711] close(3) = 0 [pid 7711] close(4) = 0 [pid 7711] close(5) = 0 [pid 7711] close(6) = -1 EBADF (Bad file descriptor) [pid 7711] close(7) = -1 EBADF (Bad file descriptor) [pid 7711] close(8) = -1 EBADF (Bad file descriptor) [pid 7711] close(9) = -1 EBADF (Bad file descriptor) [pid 7711] close(10) = -1 EBADF (Bad file descriptor) [pid 7711] close(11) = -1 EBADF (Bad file descriptor) [pid 7711] close(12) = -1 EBADF (Bad file descriptor) [pid 7711] close(13) = -1 EBADF (Bad file descriptor) [pid 7711] close(14) = -1 EBADF (Bad file descriptor) [pid 7711] close(15) = -1 EBADF (Bad file descriptor) [pid 7711] close(16) = -1 EBADF (Bad file descriptor) [pid 7711] close(17) = -1 EBADF (Bad file descriptor) [pid 7711] close(18) = -1 EBADF (Bad file descriptor) [pid 7711] close(19) = -1 EBADF (Bad file descriptor) [pid 7711] close(20) = -1 EBADF (Bad file descriptor) [pid 7711] close(21) = -1 EBADF (Bad file descriptor) [pid 7711] close(22) = -1 EBADF (Bad file descriptor) [pid 7711] close(23) = -1 EBADF (Bad file descriptor) [pid 7711] close(24) = -1 EBADF (Bad file descriptor) [pid 7711] close(25) = -1 EBADF (Bad file descriptor) [pid 7711] close(26) = -1 EBADF (Bad file descriptor) [pid 7711] close(27) = -1 EBADF (Bad file descriptor) [pid 7711] close(28) = -1 EBADF (Bad file descriptor) [pid 7711] close(29) = -1 EBADF (Bad file descriptor) [pid 7711] exit_group(0) = ? [pid 7712] <... futex resumed>) = ? [pid 7713] <... futex resumed>) = ? [pid 7712] +++ exited with 0 +++ [pid 7713] +++ exited with 0 +++ [pid 7711] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2669, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./896", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./896", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./896/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./896/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./896/cgroup.cpu") = 0 [pid 5028] umount2("./896/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./896/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./896/binderfs") = 0 [pid 5028] umount2("./896/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./896/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./896/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./896/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./896/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./896/file0") = 0 [pid 5028] umount2("./896/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./896/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./896/cgroup") = 0 [pid 5028] umount2("./896/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./896/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./896/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./896") = 0 [pid 5028] mkdir("./897", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7714 attached [pid 7714] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2672 [pid 7714] <... set_robust_list resumed>) = 0 [pid 7714] chdir("./897") = 0 [pid 7714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7714] setpgid(0, 0) = 0 [pid 7714] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7714] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7714] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7714] write(3, "1000", 4) = 4 [pid 7714] close(3) = 0 [pid 7714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7714] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7714] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7714] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7714] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7715 attached [pid 7715] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7714] <... clone3 resumed> => {parent_tid=[2673]}, 88) = 2673 [pid 7715] <... rseq resumed>) = 0 [pid 7715] set_robust_list(0x7feeffcce9a0, 24 [pid 7714] rt_sigprocmask(SIG_SETMASK, [], [pid 7715] <... set_robust_list resumed>) = 0 [pid 7714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7715] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7714] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7714] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7715] memfd_create("syzkaller", 0) = 3 [pid 7715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7715] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7715] munmap(0x7feef78ae000, 2097152) = 0 [pid 7715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7715] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7715] close(3) = 0 [pid 7715] mkdir("./file0", 0777) = 0 [pid 7715] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7715] chdir("./file0") = 0 [pid 7715] ioctl(4, LOOP_CLR_FD) = 0 [pid 7715] close(4) = 0 [pid 7715] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7714] <... futex resumed>) = 0 [pid 7715] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7714] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7714] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7715] <... openat resumed>) = 4 [pid 7715] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7714] <... futex resumed>) = 0 [pid 7715] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7714] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7714] <... futex resumed>) = 0 [pid 7715] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7714] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7715] <... openat resumed>) = 5 [pid 7715] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7714] <... futex resumed>) = 0 [pid 7715] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7714] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 273.234674][ T7715] loop0: detected capacity change from 0 to 4096 [ 273.243448][ T7715] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 273.275367][ T7715] ntfs: volume version 3.1. [pid 7714] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7714] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7714] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7716 attached => {parent_tid=[2674]}, 88) = 2674 [pid 7716] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7714] rt_sigprocmask(SIG_SETMASK, [], [pid 7716] <... rseq resumed>) = 0 [pid 7714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7716] set_robust_list(0x7feef7aad9a0, 24 [pid 7714] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7716] <... set_robust_list resumed>) = 0 [pid 7714] <... futex resumed>) = 0 [pid 7716] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7714] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7716] ftruncate(4, 0) = 0 [pid 7716] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7715] <... write resumed>) = 1048064 [pid 7716] <... futex resumed>) = 1 [pid 7714] <... futex resumed>) = 0 [pid 7715] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7716] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7715] <... futex resumed>) = 0 [pid 7714] close(3 [pid 7715] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7714] <... close resumed>) = 0 [pid 7714] close(4) = 0 [pid 7714] close(5) = 0 [pid 7714] close(6) = -1 EBADF (Bad file descriptor) [pid 7714] close(7) = -1 EBADF (Bad file descriptor) [pid 7714] close(8) = -1 EBADF (Bad file descriptor) [pid 7714] close(9) = -1 EBADF (Bad file descriptor) [pid 7714] close(10) = -1 EBADF (Bad file descriptor) [pid 7714] close(11) = -1 EBADF (Bad file descriptor) [pid 7714] close(12) = -1 EBADF (Bad file descriptor) [pid 7714] close(13) = -1 EBADF (Bad file descriptor) [pid 7714] close(14) = -1 EBADF (Bad file descriptor) [pid 7714] close(15) = -1 EBADF (Bad file descriptor) [pid 7714] close(16) = -1 EBADF (Bad file descriptor) [pid 7714] close(17) = -1 EBADF (Bad file descriptor) [pid 7714] close(18) = -1 EBADF (Bad file descriptor) [pid 7714] close(19) = -1 EBADF (Bad file descriptor) [pid 7714] close(20) = -1 EBADF (Bad file descriptor) [pid 7714] close(21) = -1 EBADF (Bad file descriptor) [pid 7714] close(22) = -1 EBADF (Bad file descriptor) [pid 7714] close(23) = -1 EBADF (Bad file descriptor) [pid 7714] close(24) = -1 EBADF (Bad file descriptor) [pid 7714] close(25) = -1 EBADF (Bad file descriptor) [pid 7714] close(26) = -1 EBADF (Bad file descriptor) [pid 7714] close(27) = -1 EBADF (Bad file descriptor) [pid 7714] close(28) = -1 EBADF (Bad file descriptor) [pid 7714] close(29) = -1 EBADF (Bad file descriptor) [pid 7714] exit_group(0 [pid 7716] <... futex resumed>) = ? [pid 7714] <... exit_group resumed>) = ? [pid 7716] +++ exited with 0 +++ [pid 7715] <... futex resumed>) = ? [pid 7715] +++ exited with 0 +++ [pid 7714] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2672, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./897", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./897", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./897/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./897/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./897/cgroup.cpu") = 0 [pid 5028] umount2("./897/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./897/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./897/binderfs") = 0 [pid 5028] umount2("./897/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./897/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./897/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./897/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./897/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./897/file0") = 0 [pid 5028] umount2("./897/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./897/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./897/cgroup") = 0 [pid 5028] umount2("./897/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./897/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./897/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./897") = 0 [pid 5028] mkdir("./898", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7717 attached [pid 7717] set_robust_list(0x5555563a56a0, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2675 [pid 7717] chdir("./898") = 0 [pid 7717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7717] setpgid(0, 0) = 0 [pid 7717] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7717] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7717] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7717] write(3, "1000", 4) = 4 [pid 7717] close(3) = 0 [pid 7717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7717] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7717] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7717] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7717] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7717] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7717] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7718 attached [pid 7718] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7717] <... clone3 resumed> => {parent_tid=[2676]}, 88) = 2676 [pid 7718] set_robust_list(0x7feeffcce9a0, 24 [pid 7717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7717] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] <... set_robust_list resumed>) = 0 [pid 7717] <... futex resumed>) = 0 [pid 7717] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7718] memfd_create("syzkaller", 0) = 3 [pid 7718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7718] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7718] munmap(0x7feef78ae000, 2097152) = 0 [pid 7718] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7718] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7718] close(3) = 0 [pid 7718] mkdir("./file0", 0777) = 0 [pid 7718] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7718] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7718] chdir("./file0") = 0 [pid 7718] ioctl(4, LOOP_CLR_FD) = 0 [pid 7718] close(4) = 0 [pid 7718] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7718] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] <... futex resumed>) = 0 [pid 7717] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7718] <... futex resumed>) = 0 [pid 7717] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7718] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7718] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7717] <... futex resumed>) = 0 [pid 7718] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7717] <... futex resumed>) = 0 [pid 7718] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7717] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7718] <... openat resumed>) = 5 [pid 7718] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7718] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] <... futex resumed>) = 0 [pid 7717] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7718] <... futex resumed>) = 0 [pid 7717] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 273.495172][ T7718] loop0: detected capacity change from 0 to 4096 [ 273.504921][ T7718] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 273.535900][ T7718] ntfs: volume version 3.1. [pid 7718] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7717] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7717] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7717] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7717] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7717] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7719 attached [pid 7719] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7717] <... clone3 resumed> => {parent_tid=[2677]}, 88) = 2677 [pid 7717] rt_sigprocmask(SIG_SETMASK, [], [pid 7719] <... rseq resumed>) = 0 [pid 7717] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7719] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7717] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7719] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7717] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7719] ftruncate(4, 0) = 0 [pid 7719] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7718] <... write resumed>) = 1048064 [pid 7718] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7718] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7719] <... futex resumed>) = 1 [pid 7717] <... futex resumed>) = 0 [pid 7719] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7717] close(3) = 0 [pid 7717] close(4) = 0 [pid 7717] close(5) = 0 [pid 7717] close(6) = -1 EBADF (Bad file descriptor) [pid 7717] close(7) = -1 EBADF (Bad file descriptor) [pid 7717] close(8) = -1 EBADF (Bad file descriptor) [pid 7717] close(9) = -1 EBADF (Bad file descriptor) [pid 7717] close(10) = -1 EBADF (Bad file descriptor) [pid 7717] close(11) = -1 EBADF (Bad file descriptor) [pid 7717] close(12) = -1 EBADF (Bad file descriptor) [pid 7717] close(13) = -1 EBADF (Bad file descriptor) [pid 7717] close(14) = -1 EBADF (Bad file descriptor) [pid 7717] close(15) = -1 EBADF (Bad file descriptor) [pid 7717] close(16) = -1 EBADF (Bad file descriptor) [pid 7717] close(17) = -1 EBADF (Bad file descriptor) [pid 7717] close(18) = -1 EBADF (Bad file descriptor) [pid 7717] close(19) = -1 EBADF (Bad file descriptor) [pid 7717] close(20) = -1 EBADF (Bad file descriptor) [pid 7717] close(21) = -1 EBADF (Bad file descriptor) [pid 7717] close(22) = -1 EBADF (Bad file descriptor) [pid 7717] close(23) = -1 EBADF (Bad file descriptor) [pid 7717] close(24) = -1 EBADF (Bad file descriptor) [pid 7717] close(25) = -1 EBADF (Bad file descriptor) [pid 7717] close(26) = -1 EBADF (Bad file descriptor) [pid 7717] close(27) = -1 EBADF (Bad file descriptor) [pid 7717] close(28) = -1 EBADF (Bad file descriptor) [pid 7717] close(29) = -1 EBADF (Bad file descriptor) [pid 7717] exit_group(0) = ? [pid 7718] <... futex resumed>) = ? [pid 7719] <... futex resumed>) = ? [pid 7718] +++ exited with 0 +++ [pid 7719] +++ exited with 0 +++ [pid 7717] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2675, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./898", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./898", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./898/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./898/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./898/cgroup.cpu") = 0 [pid 5028] umount2("./898/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./898/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./898/binderfs") = 0 [pid 5028] umount2("./898/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./898/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./898/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./898/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./898/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./898/file0") = 0 [pid 5028] umount2("./898/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./898/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./898/cgroup") = 0 [pid 5028] umount2("./898/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./898/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./898/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./898") = 0 [pid 5028] mkdir("./899", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2678 ./strace-static-x86_64: Process 7720 attached [pid 7720] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7720] chdir("./899") = 0 [pid 7720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7720] setpgid(0, 0) = 0 [pid 7720] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7720] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7720] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7720] write(3, "1000", 4) = 4 [pid 7720] close(3) = 0 [pid 7720] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7720] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7720] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7720] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7720] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7720] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7720] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7721 attached => {parent_tid=[2679]}, 88) = 2679 [pid 7721] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7720] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7721] <... rseq resumed>) = 0 [pid 7720] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7721] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7721] memfd_create("syzkaller", 0) = 3 [pid 7721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7721] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7721] munmap(0x7feef78ae000, 2097152) = 0 [pid 7721] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7721] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7721] close(3) = 0 [pid 7721] mkdir("./file0", 0777) = 0 [pid 7721] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7721] chdir("./file0") = 0 [pid 7721] ioctl(4, LOOP_CLR_FD) = 0 [pid 7721] close(4) = 0 [pid 7721] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7720] <... futex resumed>) = 0 [pid 7721] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7720] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7721] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7720] <... futex resumed>) = 0 [pid 7721] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7720] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7721] <... openat resumed>) = 4 [pid 7721] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] <... futex resumed>) = 0 [pid 7720] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7720] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7721] <... futex resumed>) = 1 [pid 7721] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7721] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7720] <... futex resumed>) = 0 [pid 7720] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7720] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7721] <... futex resumed>) = 1 [ 273.741575][ T7721] loop0: detected capacity change from 0 to 4096 [ 273.750361][ T7721] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 273.782885][ T7721] ntfs: volume version 3.1. [pid 7721] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7720] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7720] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7720] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7720] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7720] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7720] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7722 attached [pid 7722] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7720] <... clone3 resumed> => {parent_tid=[2680]}, 88) = 2680 [pid 7722] <... rseq resumed>) = 0 [pid 7720] rt_sigprocmask(SIG_SETMASK, [], [pid 7722] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7722] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7720] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7722] <... futex resumed>) = 0 [pid 7720] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7722] ftruncate(4, 0) = 0 [pid 7721] <... write resumed>) = 1048064 [pid 7721] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7721] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7722] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7720] <... futex resumed>) = 0 [pid 7722] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7720] close(3) = 0 [pid 7720] close(4) = 0 [pid 7720] close(5) = 0 [pid 7720] close(6) = -1 EBADF (Bad file descriptor) [pid 7720] close(7) = -1 EBADF (Bad file descriptor) [pid 7720] close(8) = -1 EBADF (Bad file descriptor) [pid 7720] close(9) = -1 EBADF (Bad file descriptor) [pid 7720] close(10) = -1 EBADF (Bad file descriptor) [pid 7720] close(11) = -1 EBADF (Bad file descriptor) [pid 7720] close(12) = -1 EBADF (Bad file descriptor) [pid 7720] close(13) = -1 EBADF (Bad file descriptor) [pid 7720] close(14) = -1 EBADF (Bad file descriptor) [pid 7720] close(15) = -1 EBADF (Bad file descriptor) [pid 7720] close(16) = -1 EBADF (Bad file descriptor) [pid 7720] close(17) = -1 EBADF (Bad file descriptor) [pid 7720] close(18) = -1 EBADF (Bad file descriptor) [pid 7720] close(19) = -1 EBADF (Bad file descriptor) [pid 7720] close(20) = -1 EBADF (Bad file descriptor) [pid 7720] close(21) = -1 EBADF (Bad file descriptor) [pid 7720] close(22) = -1 EBADF (Bad file descriptor) [pid 7720] close(23) = -1 EBADF (Bad file descriptor) [pid 7720] close(24) = -1 EBADF (Bad file descriptor) [pid 7720] close(25) = -1 EBADF (Bad file descriptor) [pid 7720] close(26) = -1 EBADF (Bad file descriptor) [pid 7720] close(27) = -1 EBADF (Bad file descriptor) [pid 7720] close(28) = -1 EBADF (Bad file descriptor) [pid 7720] close(29) = -1 EBADF (Bad file descriptor) [pid 7720] exit_group(0) = ? [pid 7721] <... futex resumed>) = ? [pid 7722] <... futex resumed>) = ? [pid 7721] +++ exited with 0 +++ [pid 7722] +++ exited with 0 +++ [pid 7720] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2678, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./899", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./899", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./899/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./899/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./899/cgroup.cpu") = 0 [pid 5028] umount2("./899/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./899/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./899/binderfs") = 0 [pid 5028] umount2("./899/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./899/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./899/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./899/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./899/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./899/file0") = 0 [pid 5028] umount2("./899/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./899/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./899/cgroup") = 0 [pid 5028] umount2("./899/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./899/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./899/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./899") = 0 [pid 5028] mkdir("./900", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2681 ./strace-static-x86_64: Process 7723 attached [pid 7723] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7723] chdir("./900") = 0 [pid 7723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7723] setpgid(0, 0) = 0 [pid 7723] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7723] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7723] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7723] write(3, "1000", 4) = 4 [pid 7723] close(3) = 0 [pid 7723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7723] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7723] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7723] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7723] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7723] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2682]}, 88) = 2682 ./strace-static-x86_64: Process 7724 attached [pid 7723] rt_sigprocmask(SIG_SETMASK, [], [pid 7724] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7723] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7723] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7724] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7724] memfd_create("syzkaller", 0) = 3 [pid 7724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7724] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7724] munmap(0x7feef78ae000, 2097152) = 0 [pid 7724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7724] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7724] close(3) = 0 [pid 7724] mkdir("./file0", 0777) = 0 [pid 7724] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7724] chdir("./file0") = 0 [pid 7724] ioctl(4, LOOP_CLR_FD) = 0 [pid 7724] close(4) = 0 [pid 7724] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7723] <... futex resumed>) = 0 [pid 7724] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7723] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7723] <... futex resumed>) = 0 [pid 7724] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7723] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7724] <... openat resumed>) = 4 [pid 7724] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7724] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7723] <... futex resumed>) = 0 [pid 7723] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7724] <... futex resumed>) = 0 [pid 7723] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7724] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7724] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7723] <... futex resumed>) = 0 [pid 7724] <... futex resumed>) = 1 [pid 7724] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7723] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7723] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 273.991561][ T7724] loop0: detected capacity change from 0 to 4096 [ 274.000642][ T7724] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 274.033694][ T7724] ntfs: volume version 3.1. [pid 7724] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7723] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7723] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7723] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7723] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7725 attached => {parent_tid=[2683]}, 88) = 2683 [pid 7725] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7723] rt_sigprocmask(SIG_SETMASK, [], [pid 7725] <... rseq resumed>) = 0 [pid 7723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7725] set_robust_list(0x7feef7aad9a0, 24 [pid 7723] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] <... set_robust_list resumed>) = 0 [pid 7725] rt_sigprocmask(SIG_SETMASK, [], [pid 7723] <... futex resumed>) = 0 [pid 7723] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7725] ftruncate(4, 0) = 0 [pid 7725] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7724] <... write resumed>) = 1048064 [pid 7724] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7725] <... futex resumed>) = 1 [pid 7724] <... futex resumed>) = 0 [pid 7725] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7723] <... futex resumed>) = 0 [pid 7724] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7723] close(3) = 0 [pid 7723] close(4) = 0 [pid 7723] close(5) = 0 [pid 7723] close(6) = -1 EBADF (Bad file descriptor) [pid 7723] close(7) = -1 EBADF (Bad file descriptor) [pid 7723] close(8) = -1 EBADF (Bad file descriptor) [pid 7723] close(9) = -1 EBADF (Bad file descriptor) [pid 7723] close(10) = -1 EBADF (Bad file descriptor) [pid 7723] close(11) = -1 EBADF (Bad file descriptor) [pid 7723] close(12) = -1 EBADF (Bad file descriptor) [pid 7723] close(13) = -1 EBADF (Bad file descriptor) [pid 7723] close(14) = -1 EBADF (Bad file descriptor) [pid 7723] close(15) = -1 EBADF (Bad file descriptor) [pid 7723] close(16) = -1 EBADF (Bad file descriptor) [pid 7723] close(17) = -1 EBADF (Bad file descriptor) [pid 7723] close(18) = -1 EBADF (Bad file descriptor) [pid 7723] close(19) = -1 EBADF (Bad file descriptor) [pid 7723] close(20) = -1 EBADF (Bad file descriptor) [pid 7723] close(21) = -1 EBADF (Bad file descriptor) [pid 7723] close(22) = -1 EBADF (Bad file descriptor) [pid 7723] close(23) = -1 EBADF (Bad file descriptor) [pid 7723] close(24) = -1 EBADF (Bad file descriptor) [pid 7723] close(25) = -1 EBADF (Bad file descriptor) [pid 7723] close(26) = -1 EBADF (Bad file descriptor) [pid 7723] close(27) = -1 EBADF (Bad file descriptor) [pid 7723] close(28) = -1 EBADF (Bad file descriptor) [pid 7723] close(29) = -1 EBADF (Bad file descriptor) [pid 7723] exit_group(0) = ? [pid 7725] <... futex resumed>) = ? [pid 7724] <... futex resumed>) = ? [pid 7725] +++ exited with 0 +++ [pid 7724] +++ exited with 0 +++ [pid 7723] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2681, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./900", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./900", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./900/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./900/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./900/cgroup.cpu") = 0 [pid 5028] umount2("./900/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./900/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./900/binderfs") = 0 [pid 5028] umount2("./900/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./900/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./900/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./900/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./900/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./900/file0") = 0 [pid 5028] umount2("./900/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./900/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./900/cgroup") = 0 [pid 5028] umount2("./900/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./900/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./900/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./900") = 0 [pid 5028] mkdir("./901", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7726 attached , child_tidptr=0x5555563a5690) = 2684 [pid 7726] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7726] chdir("./901") = 0 [pid 7726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7726] setpgid(0, 0) = 0 [pid 7726] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7726] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7726] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7726] write(3, "1000", 4) = 4 [pid 7726] close(3) = 0 [pid 7726] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7726] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7726] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7726] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7726] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7726] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2685]}, 88) = 2685 [pid 7726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7726] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7727 attached [pid 7727] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7727] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7727] memfd_create("syzkaller", 0) = 3 [pid 7727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7727] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7727] munmap(0x7feef78ae000, 2097152) = 0 [pid 7727] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7727] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7727] close(3) = 0 [pid 7727] mkdir("./file0", 0777) = 0 [pid 7727] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7727] chdir("./file0") = 0 [pid 7727] ioctl(4, LOOP_CLR_FD) = 0 [pid 7727] close(4) = 0 [pid 7727] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7726] <... futex resumed>) = 0 [pid 7726] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7727] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7727] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7726] <... futex resumed>) = 0 [pid 7726] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7727] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7727] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7727] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7726] <... futex resumed>) = 0 [pid 7726] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7727] <... futex resumed>) = 0 [pid 7726] <... futex resumed>) = 1 [pid 7727] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 274.242712][ T7727] loop0: detected capacity change from 0 to 4096 [ 274.252196][ T7727] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 274.284723][ T7727] ntfs: volume version 3.1. [pid 7726] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7726] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7726] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7726] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7726] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7728 attached [pid 7728] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7726] <... clone3 resumed> => {parent_tid=[2686]}, 88) = 2686 [pid 7726] rt_sigprocmask(SIG_SETMASK, [], [pid 7728] <... rseq resumed>) = 0 [pid 7728] set_robust_list(0x7feef7aad9a0, 24 [pid 7726] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7728] <... set_robust_list resumed>) = 0 [pid 7726] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7728] rt_sigprocmask(SIG_SETMASK, [], [pid 7726] <... futex resumed>) = 0 [pid 7728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7726] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7728] ftruncate(4, 0) = 0 [pid 7728] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7727] <... write resumed>) = 1048064 [pid 7728] <... futex resumed>) = 1 [pid 7727] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7728] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7727] <... futex resumed>) = 0 [pid 7727] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7726] <... futex resumed>) = 0 [pid 7726] close(3) = 0 [pid 7726] close(4) = 0 [pid 7726] close(5) = 0 [pid 7726] close(6) = -1 EBADF (Bad file descriptor) [pid 7726] close(7) = -1 EBADF (Bad file descriptor) [pid 7726] close(8) = -1 EBADF (Bad file descriptor) [pid 7726] close(9) = -1 EBADF (Bad file descriptor) [pid 7726] close(10) = -1 EBADF (Bad file descriptor) [pid 7726] close(11) = -1 EBADF (Bad file descriptor) [pid 7726] close(12) = -1 EBADF (Bad file descriptor) [pid 7726] close(13) = -1 EBADF (Bad file descriptor) [pid 7726] close(14) = -1 EBADF (Bad file descriptor) [pid 7726] close(15) = -1 EBADF (Bad file descriptor) [pid 7726] close(16) = -1 EBADF (Bad file descriptor) [pid 7726] close(17) = -1 EBADF (Bad file descriptor) [pid 7726] close(18) = -1 EBADF (Bad file descriptor) [pid 7726] close(19) = -1 EBADF (Bad file descriptor) [pid 7726] close(20) = -1 EBADF (Bad file descriptor) [pid 7726] close(21) = -1 EBADF (Bad file descriptor) [pid 7726] close(22) = -1 EBADF (Bad file descriptor) [pid 7726] close(23) = -1 EBADF (Bad file descriptor) [pid 7726] close(24) = -1 EBADF (Bad file descriptor) [pid 7726] close(25) = -1 EBADF (Bad file descriptor) [pid 7726] close(26) = -1 EBADF (Bad file descriptor) [pid 7726] close(27) = -1 EBADF (Bad file descriptor) [pid 7726] close(28) = -1 EBADF (Bad file descriptor) [pid 7726] close(29) = -1 EBADF (Bad file descriptor) [pid 7726] exit_group(0) = ? [pid 7727] <... futex resumed>) = ? [pid 7728] <... futex resumed>) = ? [pid 7727] +++ exited with 0 +++ [pid 7728] +++ exited with 0 +++ [pid 7726] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2684, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./901", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./901", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./901/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./901/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./901/cgroup.cpu") = 0 [pid 5028] umount2("./901/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./901/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./901/binderfs") = 0 [pid 5028] umount2("./901/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./901/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./901/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./901/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./901/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./901/file0") = 0 [pid 5028] umount2("./901/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./901/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./901/cgroup") = 0 [pid 5028] umount2("./901/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./901/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./901/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./901") = 0 [pid 5028] mkdir("./902", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7729 attached , child_tidptr=0x5555563a5690) = 2687 [pid 7729] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7729] chdir("./902") = 0 [pid 7729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7729] setpgid(0, 0) = 0 [pid 7729] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7729] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7729] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7729] write(3, "1000", 4) = 4 [pid 7729] close(3) = 0 [pid 7729] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7729] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7729] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7729] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7729] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7729] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7730 attached => {parent_tid=[2688]}, 88) = 2688 [pid 7730] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7729] rt_sigprocmask(SIG_SETMASK, [], [pid 7730] <... rseq resumed>) = 0 [pid 7729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7730] set_robust_list(0x7feeffcce9a0, 24 [pid 7729] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7730] <... set_robust_list resumed>) = 0 [pid 7730] rt_sigprocmask(SIG_SETMASK, [], [pid 7729] <... futex resumed>) = 0 [pid 7730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7729] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7730] memfd_create("syzkaller", 0) = 3 [pid 7730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7730] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7730] munmap(0x7feef78ae000, 2097152) = 0 [pid 7730] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7730] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7730] close(3) = 0 [pid 7730] mkdir("./file0", 0777) = 0 [pid 7730] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7730] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7730] chdir("./file0") = 0 [pid 7730] ioctl(4, LOOP_CLR_FD) = 0 [pid 7730] close(4) = 0 [pid 7730] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7730] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7729] <... futex resumed>) = 0 [pid 7729] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7730] <... futex resumed>) = 0 [pid 7730] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7729] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7730] <... openat resumed>) = 4 [pid 7730] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7729] <... futex resumed>) = 0 [pid 7730] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7729] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7729] <... futex resumed>) = 0 [pid 7730] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7729] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7730] <... openat resumed>) = 5 [pid 7730] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7729] <... futex resumed>) = 0 [pid 7730] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7729] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7730] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7729] <... futex resumed>) = 0 [pid 7730] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 274.497431][ T7730] loop0: detected capacity change from 0 to 4096 [ 274.506540][ T7730] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 274.537477][ T7730] ntfs: volume version 3.1. [pid 7729] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7729] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7729] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7729] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7731 attached [pid 7731] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7729] <... clone3 resumed> => {parent_tid=[2689]}, 88) = 2689 [pid 7731] set_robust_list(0x7feef7aad9a0, 24 [pid 7729] rt_sigprocmask(SIG_SETMASK, [], [pid 7731] <... set_robust_list resumed>) = 0 [pid 7731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7731] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7729] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7729] <... futex resumed>) = 0 [pid 7731] ftruncate(4, 0 [pid 7729] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7731] <... ftruncate resumed>) = 0 [pid 7731] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7731] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7730] <... write resumed>) = 1048064 [pid 7729] <... futex resumed>) = 0 [pid 7730] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7730] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7729] close(3) = 0 [pid 7729] close(4) = 0 [pid 7729] close(5) = 0 [pid 7729] close(6) = -1 EBADF (Bad file descriptor) [pid 7729] close(7) = -1 EBADF (Bad file descriptor) [pid 7729] close(8) = -1 EBADF (Bad file descriptor) [pid 7729] close(9) = -1 EBADF (Bad file descriptor) [pid 7729] close(10) = -1 EBADF (Bad file descriptor) [pid 7729] close(11) = -1 EBADF (Bad file descriptor) [pid 7729] close(12) = -1 EBADF (Bad file descriptor) [pid 7729] close(13) = -1 EBADF (Bad file descriptor) [pid 7729] close(14) = -1 EBADF (Bad file descriptor) [pid 7729] close(15) = -1 EBADF (Bad file descriptor) [pid 7729] close(16) = -1 EBADF (Bad file descriptor) [pid 7729] close(17) = -1 EBADF (Bad file descriptor) [pid 7729] close(18) = -1 EBADF (Bad file descriptor) [pid 7729] close(19) = -1 EBADF (Bad file descriptor) [pid 7729] close(20) = -1 EBADF (Bad file descriptor) [pid 7729] close(21) = -1 EBADF (Bad file descriptor) [pid 7729] close(22) = -1 EBADF (Bad file descriptor) [pid 7729] close(23) = -1 EBADF (Bad file descriptor) [pid 7729] close(24) = -1 EBADF (Bad file descriptor) [pid 7729] close(25) = -1 EBADF (Bad file descriptor) [pid 7729] close(26) = -1 EBADF (Bad file descriptor) [pid 7729] close(27) = -1 EBADF (Bad file descriptor) [pid 7729] close(28) = -1 EBADF (Bad file descriptor) [pid 7729] close(29) = -1 EBADF (Bad file descriptor) [pid 7729] exit_group(0 [pid 7731] <... futex resumed>) = ? [pid 7729] <... exit_group resumed>) = ? [pid 7730] <... futex resumed>) = ? [pid 7731] +++ exited with 0 +++ [pid 7730] +++ exited with 0 +++ [pid 7729] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2687, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./902", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./902", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./902/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./902/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./902/cgroup.cpu") = 0 [pid 5028] umount2("./902/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./902/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./902/binderfs") = 0 [pid 5028] umount2("./902/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./902/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./902/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./902/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./902/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./902/file0") = 0 [pid 5028] umount2("./902/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./902/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./902/cgroup") = 0 [pid 5028] umount2("./902/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./902/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./902/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./902") = 0 [pid 5028] mkdir("./903", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7732 attached [pid 7732] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7732] chdir("./903") = 0 [pid 7732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7732] setpgid(0, 0) = 0 [pid 7732] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7732] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7732] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7732] write(3, "1000", 4) = 4 [pid 7732] close(3) = 0 [pid 7732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7732] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7732] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7732] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7732] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2690 [pid 7732] <... rt_sigprocmask resumed>[], 8) = 0 [pid 7732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7733 attached => {parent_tid=[2691]}, 88) = 2691 [pid 7732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7732] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7732] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7733] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7733] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7733] memfd_create("syzkaller", 0) = 3 [pid 7733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7733] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7733] munmap(0x7feef78ae000, 2097152) = 0 [pid 7733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7733] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7733] close(3) = 0 [pid 7733] mkdir("./file0", 0777) = 0 [pid 7733] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7733] chdir("./file0") = 0 [pid 7733] ioctl(4, LOOP_CLR_FD) = 0 [pid 7733] close(4) = 0 [pid 7733] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7732] <... futex resumed>) = 0 [pid 7733] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7732] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7732] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7733] <... openat resumed>) = 4 [pid 7733] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7732] <... futex resumed>) = 0 [pid 7732] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7732] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7733] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7733] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7732] <... futex resumed>) = 0 [pid 7733] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7732] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 274.735386][ T7733] loop0: detected capacity change from 0 to 4096 [ 274.744309][ T7733] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 274.776934][ T7733] ntfs: volume version 3.1. [pid 7732] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7732] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7732] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7732] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7734 attached [pid 7734] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7732] <... clone3 resumed> => {parent_tid=[2692]}, 88) = 2692 [pid 7734] <... rseq resumed>) = 0 [pid 7733] <... write resumed>) = 1048064 [pid 7733] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7732] rt_sigprocmask(SIG_SETMASK, [], [pid 7733] <... futex resumed>) = 0 [pid 7732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7733] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7732] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7732] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7734] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7734] ftruncate(4, 0) = 0 [pid 7734] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7732] <... futex resumed>) = 0 [pid 7734] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7732] close(3) = 0 [pid 7732] close(4) = 0 [pid 7732] close(5) = 0 [pid 7732] close(6) = -1 EBADF (Bad file descriptor) [pid 7732] close(7) = -1 EBADF (Bad file descriptor) [pid 7732] close(8) = -1 EBADF (Bad file descriptor) [pid 7732] close(9) = -1 EBADF (Bad file descriptor) [pid 7732] close(10) = -1 EBADF (Bad file descriptor) [pid 7732] close(11) = -1 EBADF (Bad file descriptor) [pid 7732] close(12) = -1 EBADF (Bad file descriptor) [pid 7732] close(13) = -1 EBADF (Bad file descriptor) [pid 7732] close(14) = -1 EBADF (Bad file descriptor) [pid 7732] close(15) = -1 EBADF (Bad file descriptor) [pid 7732] close(16) = -1 EBADF (Bad file descriptor) [pid 7732] close(17) = -1 EBADF (Bad file descriptor) [pid 7732] close(18) = -1 EBADF (Bad file descriptor) [pid 7732] close(19) = -1 EBADF (Bad file descriptor) [pid 7732] close(20) = -1 EBADF (Bad file descriptor) [pid 7732] close(21) = -1 EBADF (Bad file descriptor) [pid 7732] close(22) = -1 EBADF (Bad file descriptor) [pid 7732] close(23) = -1 EBADF (Bad file descriptor) [pid 7732] close(24) = -1 EBADF (Bad file descriptor) [pid 7732] close(25) = -1 EBADF (Bad file descriptor) [pid 7732] close(26) = -1 EBADF (Bad file descriptor) [pid 7732] close(27) = -1 EBADF (Bad file descriptor) [pid 7732] close(28) = -1 EBADF (Bad file descriptor) [pid 7732] close(29) = -1 EBADF (Bad file descriptor) [pid 7732] exit_group(0 [pid 7734] <... futex resumed>) = ? [pid 7733] <... futex resumed>) = ? [pid 7732] <... exit_group resumed>) = ? [pid 7733] +++ exited with 0 +++ [pid 7734] +++ exited with 0 +++ [pid 7732] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2690, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./903", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./903", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./903/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./903/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./903/cgroup.cpu") = 0 [pid 5028] umount2("./903/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./903/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./903/binderfs") = 0 [pid 5028] umount2("./903/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./903/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./903/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./903/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./903/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./903/file0") = 0 [pid 5028] umount2("./903/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./903/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./903/cgroup") = 0 [pid 5028] umount2("./903/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./903/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./903/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./903") = 0 [pid 5028] mkdir("./904", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7735 attached [pid 7735] set_robust_list(0x5555563a56a0, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2693 [pid 7735] chdir("./904") = 0 [pid 7735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7735] setpgid(0, 0) = 0 [pid 7735] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7735] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7735] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7735] write(3, "1000", 4) = 4 [pid 7735] close(3) = 0 [pid 7735] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7735] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7735] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7735] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7735] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7735] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7736 attached => {parent_tid=[2694]}, 88) = 2694 [pid 7735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7735] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7735] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7736] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7736] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7736] memfd_create("syzkaller", 0) = 3 [pid 7736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7736] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7736] munmap(0x7feef78ae000, 2097152) = 0 [pid 7736] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7736] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7736] close(3) = 0 [pid 7736] mkdir("./file0", 0777) = 0 [pid 7736] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7736] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7736] chdir("./file0") = 0 [pid 7736] ioctl(4, LOOP_CLR_FD) = 0 [pid 7736] close(4) = 0 [pid 7736] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7735] <... futex resumed>) = 0 [pid 7736] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7735] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7735] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7736] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7736] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7735] <... futex resumed>) = 0 [pid 7735] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7735] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7736] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7736] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7736] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7735] <... futex resumed>) = 0 [pid 7735] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7736] <... futex resumed>) = 0 [pid 7735] <... futex resumed>) = 1 [pid 7736] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 274.987259][ T7736] loop0: detected capacity change from 0 to 4096 [ 275.009157][ T7736] ntfs: volume version 3.1. [pid 7735] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7735] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7735] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7735] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7737 attached [pid 7737] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7737] set_robust_list(0x7feef7aad9a0, 24 [pid 7735] <... clone3 resumed> => {parent_tid=[2695]}, 88) = 2695 [pid 7737] <... set_robust_list resumed>) = 0 [pid 7735] rt_sigprocmask(SIG_SETMASK, [], [pid 7737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7737] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7735] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7737] <... futex resumed>) = 0 [pid 7735] <... futex resumed>) = 1 [pid 7737] ftruncate(4, 0 [pid 7735] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7737] <... ftruncate resumed>) = 0 [pid 7737] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7736] <... write resumed>) = 1048064 [pid 7737] <... futex resumed>) = 1 [pid 7735] <... futex resumed>) = 0 [pid 7737] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7736] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7735] close(3 [pid 7736] <... futex resumed>) = 0 [pid 7735] <... close resumed>) = 0 [pid 7736] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7735] close(4) = 0 [pid 7735] close(5) = 0 [pid 7735] close(6) = -1 EBADF (Bad file descriptor) [pid 7735] close(7) = -1 EBADF (Bad file descriptor) [pid 7735] close(8) = -1 EBADF (Bad file descriptor) [pid 7735] close(9) = -1 EBADF (Bad file descriptor) [pid 7735] close(10) = -1 EBADF (Bad file descriptor) [pid 7735] close(11) = -1 EBADF (Bad file descriptor) [pid 7735] close(12) = -1 EBADF (Bad file descriptor) [pid 7735] close(13) = -1 EBADF (Bad file descriptor) [pid 7735] close(14) = -1 EBADF (Bad file descriptor) [pid 7735] close(15) = -1 EBADF (Bad file descriptor) [pid 7735] close(16) = -1 EBADF (Bad file descriptor) [pid 7735] close(17) = -1 EBADF (Bad file descriptor) [pid 7735] close(18) = -1 EBADF (Bad file descriptor) [pid 7735] close(19) = -1 EBADF (Bad file descriptor) [pid 7735] close(20) = -1 EBADF (Bad file descriptor) [pid 7735] close(21) = -1 EBADF (Bad file descriptor) [pid 7735] close(22) = -1 EBADF (Bad file descriptor) [pid 7735] close(23) = -1 EBADF (Bad file descriptor) [pid 7735] close(24) = -1 EBADF (Bad file descriptor) [pid 7735] close(25) = -1 EBADF (Bad file descriptor) [pid 7735] close(26) = -1 EBADF (Bad file descriptor) [pid 7735] close(27) = -1 EBADF (Bad file descriptor) [pid 7735] close(28) = -1 EBADF (Bad file descriptor) [pid 7735] close(29) = -1 EBADF (Bad file descriptor) [pid 7735] exit_group(0) = ? [pid 7736] <... futex resumed>) = ? [pid 7737] <... futex resumed>) = ? [pid 7736] +++ exited with 0 +++ [pid 7737] +++ exited with 0 +++ [pid 7735] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2693, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./904", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./904", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./904/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./904/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./904/cgroup.cpu") = 0 [pid 5028] umount2("./904/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./904/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./904/binderfs") = 0 [pid 5028] umount2("./904/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./904/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./904/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./904/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./904/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./904/file0") = 0 [pid 5028] umount2("./904/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./904/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./904/cgroup") = 0 [pid 5028] umount2("./904/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./904/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./904/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./904") = 0 [pid 5028] mkdir("./905", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7738 attached , child_tidptr=0x5555563a5690) = 2696 [pid 7738] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7738] chdir("./905") = 0 [pid 7738] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7738] setpgid(0, 0) = 0 [pid 7738] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7738] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7738] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7738] write(3, "1000", 4) = 4 [pid 7738] close(3) = 0 [pid 7738] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7738] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7738] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7738] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7738] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7738] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7738] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7739 attached => {parent_tid=[2697]}, 88) = 2697 [pid 7739] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7738] rt_sigprocmask(SIG_SETMASK, [], [pid 7739] <... rseq resumed>) = 0 [pid 7739] set_robust_list(0x7feeffcce9a0, 24 [pid 7738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7739] <... set_robust_list resumed>) = 0 [pid 7739] rt_sigprocmask(SIG_SETMASK, [], [pid 7738] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7739] memfd_create("syzkaller", 0 [pid 7738] <... futex resumed>) = 0 [pid 7738] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7739] <... memfd_create resumed>) = 3 [pid 7739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7739] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7739] munmap(0x7feef78ae000, 2097152) = 0 [pid 7739] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7739] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7739] close(3) = 0 [pid 7739] mkdir("./file0", 0777) = 0 [pid 7739] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7739] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7739] chdir("./file0") = 0 [pid 7739] ioctl(4, LOOP_CLR_FD) = 0 [pid 7739] close(4) = 0 [pid 7739] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7739] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7738] <... futex resumed>) = 0 [pid 7738] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] <... futex resumed>) = 0 [pid 7738] <... futex resumed>) = 1 [pid 7739] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7738] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7739] <... openat resumed>) = 4 [pid 7739] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7739] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7738] <... futex resumed>) = 0 [pid 7738] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] <... futex resumed>) = 0 [pid 7738] <... futex resumed>) = 1 [pid 7739] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7738] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7739] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7739] <... futex resumed>) = 0 [pid 7739] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7738] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7738] <... futex resumed>) = 0 [pid 7739] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 275.226945][ T7739] loop0: detected capacity change from 0 to 4096 [ 275.247198][ T7739] ntfs: volume version 3.1. [pid 7738] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7738] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7738] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7738] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7738] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7738] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7740 attached => {parent_tid=[2698]}, 88) = 2698 [pid 7740] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7738] rt_sigprocmask(SIG_SETMASK, [], [pid 7740] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7740] rt_sigprocmask(SIG_SETMASK, [], [pid 7738] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7740] ftruncate(4, 0 [pid 7738] <... futex resumed>) = 0 [pid 7738] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7740] <... ftruncate resumed>) = 0 [pid 7740] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7739] <... write resumed>) = 1048064 [pid 7740] <... futex resumed>) = 1 [pid 7739] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7738] <... futex resumed>) = 0 [pid 7740] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7739] <... futex resumed>) = 0 [pid 7738] close(3 [pid 7739] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7738] <... close resumed>) = 0 [pid 7738] close(4) = 0 [pid 7738] close(5) = 0 [pid 7738] close(6) = -1 EBADF (Bad file descriptor) [pid 7738] close(7) = -1 EBADF (Bad file descriptor) [pid 7738] close(8) = -1 EBADF (Bad file descriptor) [pid 7738] close(9) = -1 EBADF (Bad file descriptor) [pid 7738] close(10) = -1 EBADF (Bad file descriptor) [pid 7738] close(11) = -1 EBADF (Bad file descriptor) [pid 7738] close(12) = -1 EBADF (Bad file descriptor) [pid 7738] close(13) = -1 EBADF (Bad file descriptor) [pid 7738] close(14) = -1 EBADF (Bad file descriptor) [pid 7738] close(15) = -1 EBADF (Bad file descriptor) [pid 7738] close(16) = -1 EBADF (Bad file descriptor) [pid 7738] close(17) = -1 EBADF (Bad file descriptor) [pid 7738] close(18) = -1 EBADF (Bad file descriptor) [pid 7738] close(19) = -1 EBADF (Bad file descriptor) [pid 7738] close(20) = -1 EBADF (Bad file descriptor) [pid 7738] close(21) = -1 EBADF (Bad file descriptor) [pid 7738] close(22) = -1 EBADF (Bad file descriptor) [pid 7738] close(23) = -1 EBADF (Bad file descriptor) [pid 7738] close(24) = -1 EBADF (Bad file descriptor) [pid 7738] close(25) = -1 EBADF (Bad file descriptor) [pid 7738] close(26) = -1 EBADF (Bad file descriptor) [pid 7738] close(27) = -1 EBADF (Bad file descriptor) [pid 7738] close(28) = -1 EBADF (Bad file descriptor) [pid 7738] close(29) = -1 EBADF (Bad file descriptor) [pid 7738] exit_group(0 [pid 7739] <... futex resumed>) = ? [pid 7740] <... futex resumed>) = ? [pid 7738] <... exit_group resumed>) = ? [pid 7740] +++ exited with 0 +++ [pid 7739] +++ exited with 0 +++ [pid 7738] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2696, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./905", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./905", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./905/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./905/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./905/cgroup.cpu") = 0 [pid 5028] umount2("./905/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./905/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./905/binderfs") = 0 [pid 5028] umount2("./905/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./905/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./905/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./905/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./905/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./905/file0") = 0 [pid 5028] umount2("./905/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./905/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./905/cgroup") = 0 [pid 5028] umount2("./905/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./905/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./905/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./905") = 0 [pid 5028] mkdir("./906", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7741 attached , child_tidptr=0x5555563a5690) = 2699 [pid 7741] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7741] chdir("./906") = 0 [pid 7741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7741] setpgid(0, 0) = 0 [pid 7741] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7741] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7741] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7741] write(3, "1000", 4) = 4 [pid 7741] close(3) = 0 [pid 7741] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7741] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7741] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7741] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7741] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7742 attached => {parent_tid=[2700]}, 88) = 2700 [pid 7742] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7741] rt_sigprocmask(SIG_SETMASK, [], [pid 7742] <... rseq resumed>) = 0 [pid 7741] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7742] set_robust_list(0x7feeffcce9a0, 24 [pid 7741] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7742] <... set_robust_list resumed>) = 0 [pid 7741] <... futex resumed>) = 0 [pid 7742] rt_sigprocmask(SIG_SETMASK, [], [pid 7741] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7742] memfd_create("syzkaller", 0) = 3 [pid 7742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7742] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7742] munmap(0x7feef78ae000, 2097152) = 0 [pid 7742] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7742] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7742] close(3) = 0 [pid 7742] mkdir("./file0", 0777) = 0 [pid 7742] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7742] chdir("./file0") = 0 [pid 7742] ioctl(4, LOOP_CLR_FD) = 0 [pid 7742] close(4) = 0 [pid 7742] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7742] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7741] <... futex resumed>) = 0 [pid 7741] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7742] <... futex resumed>) = 0 [pid 7742] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7741] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7742] <... openat resumed>) = 4 [pid 7742] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7741] <... futex resumed>) = 0 [pid 7742] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7741] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7741] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7742] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7742] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7741] <... futex resumed>) = 0 [pid 7742] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7741] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 275.469489][ T7742] loop0: detected capacity change from 0 to 4096 [ 275.492166][ T7742] ntfs: volume version 3.1. [pid 7741] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7741] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7741] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7743 attached => {parent_tid=[2701]}, 88) = 2701 [pid 7743] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7741] rt_sigprocmask(SIG_SETMASK, [], [pid 7743] set_robust_list(0x7feef7aad9a0, 24 [pid 7741] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7743] <... set_robust_list resumed>) = 0 [pid 7741] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7743] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7741] <... futex resumed>) = 0 [pid 7741] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7743] ftruncate(4, 0) = 0 [pid 7742] <... write resumed>) = 1048064 [pid 7743] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7742] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7741] <... futex resumed>) = 0 [pid 7743] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7742] <... futex resumed>) = 0 [pid 7741] close(3 [pid 7742] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7741] <... close resumed>) = 0 [pid 7741] close(4) = 0 [pid 7741] close(5) = 0 [pid 7741] close(6) = -1 EBADF (Bad file descriptor) [pid 7741] close(7) = -1 EBADF (Bad file descriptor) [pid 7741] close(8) = -1 EBADF (Bad file descriptor) [pid 7741] close(9) = -1 EBADF (Bad file descriptor) [pid 7741] close(10) = -1 EBADF (Bad file descriptor) [pid 7741] close(11) = -1 EBADF (Bad file descriptor) [pid 7741] close(12) = -1 EBADF (Bad file descriptor) [pid 7741] close(13) = -1 EBADF (Bad file descriptor) [pid 7741] close(14) = -1 EBADF (Bad file descriptor) [pid 7741] close(15) = -1 EBADF (Bad file descriptor) [pid 7741] close(16) = -1 EBADF (Bad file descriptor) [pid 7741] close(17) = -1 EBADF (Bad file descriptor) [pid 7741] close(18) = -1 EBADF (Bad file descriptor) [pid 7741] close(19) = -1 EBADF (Bad file descriptor) [pid 7741] close(20) = -1 EBADF (Bad file descriptor) [pid 7741] close(21) = -1 EBADF (Bad file descriptor) [pid 7741] close(22) = -1 EBADF (Bad file descriptor) [pid 7741] close(23) = -1 EBADF (Bad file descriptor) [pid 7741] close(24) = -1 EBADF (Bad file descriptor) [pid 7741] close(25) = -1 EBADF (Bad file descriptor) [pid 7741] close(26) = -1 EBADF (Bad file descriptor) [pid 7741] close(27) = -1 EBADF (Bad file descriptor) [pid 7741] close(28) = -1 EBADF (Bad file descriptor) [pid 7741] close(29) = -1 EBADF (Bad file descriptor) [pid 7741] exit_group(0) = ? [pid 7742] <... futex resumed>) = ? [pid 7743] <... futex resumed>) = ? [pid 7743] +++ exited with 0 +++ [pid 7742] +++ exited with 0 +++ [pid 7741] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2699, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./906", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./906", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./906/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./906/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./906/cgroup.cpu") = 0 [pid 5028] umount2("./906/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./906/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./906/binderfs") = 0 [pid 5028] umount2("./906/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./906/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./906/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./906/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./906/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./906/file0") = 0 [pid 5028] umount2("./906/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./906/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./906/cgroup") = 0 [pid 5028] umount2("./906/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./906/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./906/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./906") = 0 [pid 5028] mkdir("./907", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7744 attached , child_tidptr=0x5555563a5690) = 2702 [pid 7744] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7744] chdir("./907") = 0 [pid 7744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7744] setpgid(0, 0) = 0 [pid 7744] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7744] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7744] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7744] write(3, "1000", 4) = 4 [pid 7744] close(3) = 0 [pid 7744] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7744] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7744] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7744] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7744] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7744] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7745 attached [pid 7745] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7744] <... clone3 resumed> => {parent_tid=[2703]}, 88) = 2703 [pid 7745] <... rseq resumed>) = 0 [pid 7745] set_robust_list(0x7feeffcce9a0, 24 [pid 7744] rt_sigprocmask(SIG_SETMASK, [], [pid 7745] <... set_robust_list resumed>) = 0 [pid 7744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7745] rt_sigprocmask(SIG_SETMASK, [], [pid 7744] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7744] <... futex resumed>) = 0 [pid 7744] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7745] memfd_create("syzkaller", 0) = 3 [pid 7745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7745] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7745] munmap(0x7feef78ae000, 2097152) = 0 [pid 7745] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7745] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7745] close(3) = 0 [pid 7745] mkdir("./file0", 0777) = 0 [pid 7745] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7745] chdir("./file0") = 0 [pid 7745] ioctl(4, LOOP_CLR_FD) = 0 [pid 7745] close(4) = 0 [pid 7745] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7745] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7744] <... futex resumed>) = 0 [pid 7744] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7744] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7745] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7745] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7744] <... futex resumed>) = 0 [pid 7745] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7744] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7745] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7744] <... futex resumed>) = 0 [pid 7745] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7745] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7744] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7744] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7745] <... futex resumed>) = 0 [pid 7744] <... futex resumed>) = 1 [pid 7745] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 275.701318][ T7745] loop0: detected capacity change from 0 to 4096 [ 275.722519][ T7745] ntfs: volume version 3.1. [pid 7744] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7744] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7744] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7744] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7744] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7746 attached => {parent_tid=[2704]}, 88) = 2704 [pid 7746] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7744] rt_sigprocmask(SIG_SETMASK, [], [pid 7746] <... rseq resumed>) = 0 [pid 7744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7746] set_robust_list(0x7feef7aad9a0, 24 [pid 7744] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7746] <... set_robust_list resumed>) = 0 [pid 7744] <... futex resumed>) = 0 [pid 7746] rt_sigprocmask(SIG_SETMASK, [], [pid 7744] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7746] ftruncate(4, 0) = 0 [pid 7746] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7745] <... write resumed>) = 1048064 [pid 7746] <... futex resumed>) = 1 [pid 7745] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7744] <... futex resumed>) = 0 [pid 7746] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7745] <... futex resumed>) = 0 [pid 7744] close(3 [pid 7745] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7744] <... close resumed>) = 0 [pid 7744] close(4) = 0 [pid 7744] close(5) = 0 [pid 7744] close(6) = -1 EBADF (Bad file descriptor) [pid 7744] close(7) = -1 EBADF (Bad file descriptor) [pid 7744] close(8) = -1 EBADF (Bad file descriptor) [pid 7744] close(9) = -1 EBADF (Bad file descriptor) [pid 7744] close(10) = -1 EBADF (Bad file descriptor) [pid 7744] close(11) = -1 EBADF (Bad file descriptor) [pid 7744] close(12) = -1 EBADF (Bad file descriptor) [pid 7744] close(13) = -1 EBADF (Bad file descriptor) [pid 7744] close(14) = -1 EBADF (Bad file descriptor) [pid 7744] close(15) = -1 EBADF (Bad file descriptor) [pid 7744] close(16) = -1 EBADF (Bad file descriptor) [pid 7744] close(17) = -1 EBADF (Bad file descriptor) [pid 7744] close(18) = -1 EBADF (Bad file descriptor) [pid 7744] close(19) = -1 EBADF (Bad file descriptor) [pid 7744] close(20) = -1 EBADF (Bad file descriptor) [pid 7744] close(21) = -1 EBADF (Bad file descriptor) [pid 7744] close(22) = -1 EBADF (Bad file descriptor) [pid 7744] close(23) = -1 EBADF (Bad file descriptor) [pid 7744] close(24) = -1 EBADF (Bad file descriptor) [pid 7744] close(25) = -1 EBADF (Bad file descriptor) [pid 7744] close(26) = -1 EBADF (Bad file descriptor) [pid 7744] close(27) = -1 EBADF (Bad file descriptor) [pid 7744] close(28) = -1 EBADF (Bad file descriptor) [pid 7744] close(29) = -1 EBADF (Bad file descriptor) [pid 7744] exit_group(0) = ? [pid 7746] <... futex resumed>) = ? [pid 7745] <... futex resumed>) = ? [pid 7746] +++ exited with 0 +++ [pid 7745] +++ exited with 0 +++ [pid 7744] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2702, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./907", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./907", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./907/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./907/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./907/cgroup.cpu") = 0 [pid 5028] umount2("./907/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./907/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./907/binderfs") = 0 [pid 5028] umount2("./907/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./907/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./907/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./907/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./907/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./907/file0") = 0 [pid 5028] umount2("./907/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./907/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./907/cgroup") = 0 [pid 5028] umount2("./907/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./907/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./907/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./907") = 0 [pid 5028] mkdir("./908", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2705 ./strace-static-x86_64: Process 7747 attached [pid 7747] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7747] chdir("./908") = 0 [pid 7747] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7747] setpgid(0, 0) = 0 [pid 7747] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7747] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7747] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7747] write(3, "1000", 4) = 4 [pid 7747] close(3) = 0 [pid 7747] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7747] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7747] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7747] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7747] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7747] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7747] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7747] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2706]}, 88) = 2706 [pid 7747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7747] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7747] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7748 attached [pid 7748] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7748] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7748] memfd_create("syzkaller", 0) = 3 [pid 7748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7748] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7748] munmap(0x7feef78ae000, 2097152) = 0 [pid 7748] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7748] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7748] close(3) = 0 [pid 7748] mkdir("./file0", 0777) = 0 [pid 7748] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7748] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7748] chdir("./file0") = 0 [pid 7748] ioctl(4, LOOP_CLR_FD) = 0 [pid 7748] close(4) = 0 [pid 7748] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7748] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7747] <... futex resumed>) = 0 [pid 7747] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7747] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7748] <... futex resumed>) = 0 [pid 7748] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7748] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7747] <... futex resumed>) = 0 [pid 7748] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7747] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7747] <... futex resumed>) = 0 [pid 7748] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7747] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7748] <... openat resumed>) = 5 [pid 7748] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7747] <... futex resumed>) = 0 [pid 7748] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7747] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7747] <... futex resumed>) = 0 [pid 7748] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 275.924842][ T7748] loop0: detected capacity change from 0 to 4096 [ 275.946432][ T7748] ntfs: volume version 3.1. [pid 7747] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7747] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7747] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7747] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7747] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7747] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7749 attached [pid 7749] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7747] <... clone3 resumed> => {parent_tid=[2707]}, 88) = 2707 [pid 7749] <... rseq resumed>) = 0 [pid 7747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7747] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7749] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7747] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7749] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7749] ftruncate(4, 0) = 0 [pid 7748] <... write resumed>) = 1048064 [pid 7749] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7748] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7749] <... futex resumed>) = 1 [pid 7747] <... futex resumed>) = 0 [pid 7749] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7748] <... futex resumed>) = 0 [pid 7747] close(3) = 0 [pid 7748] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7747] close(4) = 0 [pid 7747] close(5) = 0 [pid 7747] close(6) = -1 EBADF (Bad file descriptor) [pid 7747] close(7) = -1 EBADF (Bad file descriptor) [pid 7747] close(8) = -1 EBADF (Bad file descriptor) [pid 7747] close(9) = -1 EBADF (Bad file descriptor) [pid 7747] close(10) = -1 EBADF (Bad file descriptor) [pid 7747] close(11) = -1 EBADF (Bad file descriptor) [pid 7747] close(12) = -1 EBADF (Bad file descriptor) [pid 7747] close(13) = -1 EBADF (Bad file descriptor) [pid 7747] close(14) = -1 EBADF (Bad file descriptor) [pid 7747] close(15) = -1 EBADF (Bad file descriptor) [pid 7747] close(16) = -1 EBADF (Bad file descriptor) [pid 7747] close(17) = -1 EBADF (Bad file descriptor) [pid 7747] close(18) = -1 EBADF (Bad file descriptor) [pid 7747] close(19) = -1 EBADF (Bad file descriptor) [pid 7747] close(20) = -1 EBADF (Bad file descriptor) [pid 7747] close(21) = -1 EBADF (Bad file descriptor) [pid 7747] close(22) = -1 EBADF (Bad file descriptor) [pid 7747] close(23) = -1 EBADF (Bad file descriptor) [pid 7747] close(24) = -1 EBADF (Bad file descriptor) [pid 7747] close(25) = -1 EBADF (Bad file descriptor) [pid 7747] close(26) = -1 EBADF (Bad file descriptor) [pid 7747] close(27) = -1 EBADF (Bad file descriptor) [pid 7747] close(28) = -1 EBADF (Bad file descriptor) [pid 7747] close(29) = -1 EBADF (Bad file descriptor) [pid 7747] exit_group(0 [pid 7749] <... futex resumed>) = ? [pid 7749] +++ exited with 0 +++ [pid 7748] <... futex resumed>) = ? [pid 7747] <... exit_group resumed>) = ? [pid 7748] +++ exited with 0 +++ [pid 7747] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2705, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./908", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./908", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./908/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./908/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./908/cgroup.cpu") = 0 [pid 5028] umount2("./908/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./908/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./908/binderfs") = 0 [pid 5028] umount2("./908/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./908/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./908/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./908/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./908/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./908/file0") = 0 [pid 5028] umount2("./908/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./908/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./908/cgroup") = 0 [pid 5028] umount2("./908/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./908/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./908/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./908") = 0 [pid 5028] mkdir("./909", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7750 attached [pid 7750] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7750] chdir("./909") = 0 [pid 7750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7750] setpgid(0, 0) = 0 [pid 7750] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7750] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7750] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7750] write(3, "1000", 4) = 4 [pid 7750] close(3 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2708 [pid 7750] <... close resumed>) = 0 [pid 7750] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7750] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7750] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7750] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7751 attached => {parent_tid=[2709]}, 88) = 2709 [pid 7751] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7750] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7750] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7750] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7751] <... rseq resumed>) = 0 [pid 7751] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7751] memfd_create("syzkaller", 0) = 3 [pid 7751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7751] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7751] munmap(0x7feef78ae000, 2097152) = 0 [pid 7751] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7751] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7751] close(3) = 0 [pid 7751] mkdir("./file0", 0777) = 0 [pid 7751] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7751] chdir("./file0") = 0 [pid 7751] ioctl(4, LOOP_CLR_FD) = 0 [pid 7751] close(4) = 0 [pid 7751] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7750] <... futex resumed>) = 0 [pid 7750] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7751] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7750] <... futex resumed>) = 0 [pid 7750] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7751] <... openat resumed>) = 4 [pid 7751] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7750] <... futex resumed>) = 0 [pid 7750] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7750] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7751] <... futex resumed>) = 1 [pid 7751] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7751] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7750] <... futex resumed>) = 0 [pid 7750] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7750] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7751] <... futex resumed>) = 1 [ 276.160178][ T7751] loop0: detected capacity change from 0 to 4096 [ 276.181285][ T7751] ntfs: volume version 3.1. [pid 7751] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7750] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7750] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7752 attached [pid 7752] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7750] <... clone3 resumed> => {parent_tid=[2710]}, 88) = 2710 [pid 7752] <... rseq resumed>) = 0 [pid 7750] rt_sigprocmask(SIG_SETMASK, [], [pid 7752] set_robust_list(0x7feef7aad9a0, 24 [pid 7750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7752] <... set_robust_list resumed>) = 0 [pid 7752] rt_sigprocmask(SIG_SETMASK, [], [pid 7750] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7750] <... futex resumed>) = 0 [pid 7752] ftruncate(4, 0 [pid 7750] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7752] <... ftruncate resumed>) = 0 [pid 7752] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7751] <... write resumed>) = 1048064 [pid 7750] <... futex resumed>) = 0 [pid 7752] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7751] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7750] close(3 [pid 7751] <... futex resumed>) = 0 [pid 7750] <... close resumed>) = 0 [pid 7751] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7750] close(4) = 0 [pid 7750] close(5) = 0 [pid 7750] close(6) = -1 EBADF (Bad file descriptor) [pid 7750] close(7) = -1 EBADF (Bad file descriptor) [pid 7750] close(8) = -1 EBADF (Bad file descriptor) [pid 7750] close(9) = -1 EBADF (Bad file descriptor) [pid 7750] close(10) = -1 EBADF (Bad file descriptor) [pid 7750] close(11) = -1 EBADF (Bad file descriptor) [pid 7750] close(12) = -1 EBADF (Bad file descriptor) [pid 7750] close(13) = -1 EBADF (Bad file descriptor) [pid 7750] close(14) = -1 EBADF (Bad file descriptor) [pid 7750] close(15) = -1 EBADF (Bad file descriptor) [pid 7750] close(16) = -1 EBADF (Bad file descriptor) [pid 7750] close(17) = -1 EBADF (Bad file descriptor) [pid 7750] close(18) = -1 EBADF (Bad file descriptor) [pid 7750] close(19) = -1 EBADF (Bad file descriptor) [pid 7750] close(20) = -1 EBADF (Bad file descriptor) [pid 7750] close(21) = -1 EBADF (Bad file descriptor) [pid 7750] close(22) = -1 EBADF (Bad file descriptor) [pid 7750] close(23) = -1 EBADF (Bad file descriptor) [pid 7750] close(24) = -1 EBADF (Bad file descriptor) [pid 7750] close(25) = -1 EBADF (Bad file descriptor) [pid 7750] close(26) = -1 EBADF (Bad file descriptor) [pid 7750] close(27) = -1 EBADF (Bad file descriptor) [pid 7750] close(28) = -1 EBADF (Bad file descriptor) [pid 7750] close(29) = -1 EBADF (Bad file descriptor) [pid 7750] exit_group(0) = ? [pid 7752] <... futex resumed>) = ? [pid 7751] <... futex resumed>) = ? [pid 7752] +++ exited with 0 +++ [pid 7751] +++ exited with 0 +++ [pid 7750] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2708, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./909", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./909", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./909/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./909/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./909/cgroup.cpu") = 0 [pid 5028] umount2("./909/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./909/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./909/binderfs") = 0 [pid 5028] umount2("./909/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./909/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./909/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./909/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./909/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./909/file0") = 0 [pid 5028] umount2("./909/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./909/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./909/cgroup") = 0 [pid 5028] umount2("./909/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./909/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./909/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./909") = 0 [pid 5028] mkdir("./910", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7753 attached , child_tidptr=0x5555563a5690) = 2711 [pid 7753] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7753] chdir("./910") = 0 [pid 7753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7753] setpgid(0, 0) = 0 [pid 7753] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7753] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7753] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7753] write(3, "1000", 4) = 4 [pid 7753] close(3) = 0 [pid 7753] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7753] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7753] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7753] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7753] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7753] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7753] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7754 attached => {parent_tid=[2712]}, 88) = 2712 [pid 7753] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7754] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7753] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7754] <... rseq resumed>) = 0 [pid 7754] set_robust_list(0x7feeffcce9a0, 24 [pid 7753] <... futex resumed>) = 0 [pid 7754] <... set_robust_list resumed>) = 0 [pid 7753] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7754] memfd_create("syzkaller", 0) = 3 [pid 7754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7754] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7754] munmap(0x7feef78ae000, 2097152) = 0 [pid 7754] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7754] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7754] close(3) = 0 [pid 7754] mkdir("./file0", 0777) = 0 [pid 7754] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7754] chdir("./file0") = 0 [pid 7754] ioctl(4, LOOP_CLR_FD) = 0 [pid 7754] close(4) = 0 [pid 7754] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7753] <... futex resumed>) = 0 [pid 7754] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7753] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7753] <... futex resumed>) = 0 [pid 7754] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7753] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7754] <... openat resumed>) = 4 [pid 7754] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7753] <... futex resumed>) = 0 [pid 7753] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7754] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7753] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7754] <... openat resumed>) = 5 [pid 7754] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7753] <... futex resumed>) = 0 [pid 7754] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7753] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 276.381826][ T7754] loop0: detected capacity change from 0 to 4096 [ 276.403372][ T7754] ntfs: volume version 3.1. [pid 7753] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7753] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7753] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7753] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7753] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7755 attached [pid 7755] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7753] <... clone3 resumed> => {parent_tid=[2713]}, 88) = 2713 [pid 7755] <... rseq resumed>) = 0 [pid 7753] rt_sigprocmask(SIG_SETMASK, [], [pid 7755] set_robust_list(0x7feef7aad9a0, 24 [pid 7753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7755] <... set_robust_list resumed>) = 0 [pid 7753] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7755] rt_sigprocmask(SIG_SETMASK, [], [pid 7753] <... futex resumed>) = 0 [pid 7755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7753] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7755] ftruncate(4, 0) = 0 [pid 7755] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7753] <... futex resumed>) = 0 [pid 7754] <... write resumed>) = 1048064 [pid 7755] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7754] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7754] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7753] close(3) = 0 [pid 7753] close(4) = 0 [pid 7753] close(5) = 0 [pid 7753] close(6) = -1 EBADF (Bad file descriptor) [pid 7753] close(7) = -1 EBADF (Bad file descriptor) [pid 7753] close(8) = -1 EBADF (Bad file descriptor) [pid 7753] close(9) = -1 EBADF (Bad file descriptor) [pid 7753] close(10) = -1 EBADF (Bad file descriptor) [pid 7753] close(11) = -1 EBADF (Bad file descriptor) [pid 7753] close(12) = -1 EBADF (Bad file descriptor) [pid 7753] close(13) = -1 EBADF (Bad file descriptor) [pid 7753] close(14) = -1 EBADF (Bad file descriptor) [pid 7753] close(15) = -1 EBADF (Bad file descriptor) [pid 7753] close(16) = -1 EBADF (Bad file descriptor) [pid 7753] close(17) = -1 EBADF (Bad file descriptor) [pid 7753] close(18) = -1 EBADF (Bad file descriptor) [pid 7753] close(19) = -1 EBADF (Bad file descriptor) [pid 7753] close(20) = -1 EBADF (Bad file descriptor) [pid 7753] close(21) = -1 EBADF (Bad file descriptor) [pid 7753] close(22) = -1 EBADF (Bad file descriptor) [pid 7753] close(23) = -1 EBADF (Bad file descriptor) [pid 7753] close(24) = -1 EBADF (Bad file descriptor) [pid 7753] close(25) = -1 EBADF (Bad file descriptor) [pid 7753] close(26) = -1 EBADF (Bad file descriptor) [pid 7753] close(27) = -1 EBADF (Bad file descriptor) [pid 7753] close(28) = -1 EBADF (Bad file descriptor) [pid 7753] close(29) = -1 EBADF (Bad file descriptor) [pid 7753] exit_group(0) = ? [pid 7755] <... futex resumed>) = ? [pid 7754] <... futex resumed>) = ? [pid 7755] +++ exited with 0 +++ [pid 7754] +++ exited with 0 +++ [pid 7753] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2711, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./910", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./910", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./910/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./910/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./910/cgroup.cpu") = 0 [pid 5028] umount2("./910/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./910/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./910/binderfs") = 0 [pid 5028] umount2("./910/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./910/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./910/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./910/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./910/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./910/file0") = 0 [pid 5028] umount2("./910/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./910/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./910/cgroup") = 0 [pid 5028] umount2("./910/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./910/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./910/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./910") = 0 [pid 5028] mkdir("./911", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2714 ./strace-static-x86_64: Process 7756 attached [pid 7756] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7756] chdir("./911") = 0 [pid 7756] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7756] setpgid(0, 0) = 0 [pid 7756] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7756] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7756] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7756] write(3, "1000", 4) = 4 [pid 7756] close(3) = 0 [pid 7756] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7756] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7756] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7756] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7756] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7756] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7756] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7757 attached => {parent_tid=[2715]}, 88) = 2715 [pid 7756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7756] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7756] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7757] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7757] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7757] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7757] memfd_create("syzkaller", 0) = 3 [pid 7757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7757] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7757] munmap(0x7feef78ae000, 2097152) = 0 [pid 7757] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7757] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7757] close(3) = 0 [pid 7757] mkdir("./file0", 0777) = 0 [pid 7757] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7757] chdir("./file0") = 0 [pid 7757] ioctl(4, LOOP_CLR_FD) = 0 [pid 7757] close(4) = 0 [pid 7757] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7756] <... futex resumed>) = 0 [pid 7757] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7756] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7757] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7756] <... futex resumed>) = 0 [pid 7756] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7757] <... openat resumed>) = 4 [pid 7757] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7756] <... futex resumed>) = 0 [pid 7756] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7756] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7757] <... futex resumed>) = 1 [pid 7757] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7757] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7756] <... futex resumed>) = 0 [pid 7757] <... futex resumed>) = 1 [pid 7756] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7757] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 276.613344][ T7757] loop0: detected capacity change from 0 to 4096 [ 276.635655][ T7757] ntfs: volume version 3.1. [pid 7756] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7756] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7756] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7756] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7756] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7756] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7758 attached => {parent_tid=[2716]}, 88) = 2716 [pid 7758] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7758] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7758] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7758] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7756] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7758] <... futex resumed>) = 0 [pid 7758] ftruncate(4, 0 [pid 7756] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7758] <... ftruncate resumed>) = 0 [pid 7758] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7757] <... write resumed>) = 1048064 [pid 7758] <... futex resumed>) = 1 [pid 7757] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7758] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7757] <... futex resumed>) = 0 [pid 7757] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7756] <... futex resumed>) = 0 [pid 7756] close(3) = 0 [pid 7756] close(4) = 0 [pid 7756] close(5) = 0 [pid 7756] close(6) = -1 EBADF (Bad file descriptor) [pid 7756] close(7) = -1 EBADF (Bad file descriptor) [pid 7756] close(8) = -1 EBADF (Bad file descriptor) [pid 7756] close(9) = -1 EBADF (Bad file descriptor) [pid 7756] close(10) = -1 EBADF (Bad file descriptor) [pid 7756] close(11) = -1 EBADF (Bad file descriptor) [pid 7756] close(12) = -1 EBADF (Bad file descriptor) [pid 7756] close(13) = -1 EBADF (Bad file descriptor) [pid 7756] close(14) = -1 EBADF (Bad file descriptor) [pid 7756] close(15) = -1 EBADF (Bad file descriptor) [pid 7756] close(16) = -1 EBADF (Bad file descriptor) [pid 7756] close(17) = -1 EBADF (Bad file descriptor) [pid 7756] close(18) = -1 EBADF (Bad file descriptor) [pid 7756] close(19) = -1 EBADF (Bad file descriptor) [pid 7756] close(20) = -1 EBADF (Bad file descriptor) [pid 7756] close(21) = -1 EBADF (Bad file descriptor) [pid 7756] close(22) = -1 EBADF (Bad file descriptor) [pid 7756] close(23) = -1 EBADF (Bad file descriptor) [pid 7756] close(24) = -1 EBADF (Bad file descriptor) [pid 7756] close(25) = -1 EBADF (Bad file descriptor) [pid 7756] close(26) = -1 EBADF (Bad file descriptor) [pid 7756] close(27) = -1 EBADF (Bad file descriptor) [pid 7756] close(28) = -1 EBADF (Bad file descriptor) [pid 7756] close(29) = -1 EBADF (Bad file descriptor) [pid 7756] exit_group(0 [pid 7758] <... futex resumed>) = ? [pid 7757] <... futex resumed>) = ? [pid 7756] <... exit_group resumed>) = ? [pid 7758] +++ exited with 0 +++ [pid 7757] +++ exited with 0 +++ [pid 7756] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2714, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./911", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./911", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./911/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./911/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./911/cgroup.cpu") = 0 [pid 5028] umount2("./911/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./911/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./911/binderfs") = 0 [pid 5028] umount2("./911/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./911/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./911/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./911/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./911/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./911/file0") = 0 [pid 5028] umount2("./911/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./911/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./911/cgroup") = 0 [pid 5028] umount2("./911/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./911/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./911/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./911") = 0 [pid 5028] mkdir("./912", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2717 ./strace-static-x86_64: Process 7759 attached [pid 7759] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7759] chdir("./912") = 0 [pid 7759] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7759] setpgid(0, 0) = 0 [pid 7759] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7759] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7759] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7759] write(3, "1000", 4) = 4 [pid 7759] close(3) = 0 [pid 7759] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7759] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7759] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7759] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7759] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7759] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7759] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7760 attached [pid 7760] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7759] <... clone3 resumed> => {parent_tid=[2718]}, 88) = 2718 [pid 7760] <... rseq resumed>) = 0 [pid 7759] rt_sigprocmask(SIG_SETMASK, [], [pid 7760] set_robust_list(0x7feeffcce9a0, 24 [pid 7759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7760] <... set_robust_list resumed>) = 0 [pid 7759] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] rt_sigprocmask(SIG_SETMASK, [], [pid 7759] <... futex resumed>) = 0 [pid 7760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7759] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7760] memfd_create("syzkaller", 0) = 3 [pid 7760] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7760] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7760] munmap(0x7feef78ae000, 2097152) = 0 [pid 7760] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7760] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7760] close(3) = 0 [pid 7760] mkdir("./file0", 0777) = 0 [pid 7760] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7760] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7760] chdir("./file0") = 0 [pid 7760] ioctl(4, LOOP_CLR_FD) = 0 [pid 7760] close(4) = 0 [pid 7760] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7759] <... futex resumed>) = 0 [pid 7760] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7759] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7759] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7760] <... openat resumed>) = 4 [pid 7760] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] <... futex resumed>) = 0 [pid 7759] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7760] <... futex resumed>) = 1 [pid 7759] <... futex resumed>) = 0 [pid 7759] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7760] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7760] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7760] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7759] <... futex resumed>) = 0 [pid 7759] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7759] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7760] <... futex resumed>) = 0 [ 276.853937][ T7760] loop0: detected capacity change from 0 to 4096 [ 276.876162][ T7760] ntfs: volume version 3.1. [pid 7760] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7759] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7759] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7759] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7759] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7759] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7761 attached => {parent_tid=[2719]}, 88) = 2719 [pid 7761] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7759] rt_sigprocmask(SIG_SETMASK, [], [pid 7761] <... rseq resumed>) = 0 [pid 7759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7761] set_robust_list(0x7feef7aad9a0, 24 [pid 7759] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7761] <... set_robust_list resumed>) = 0 [pid 7760] <... write resumed>) = 1048064 [pid 7759] <... futex resumed>) = 0 [pid 7761] rt_sigprocmask(SIG_SETMASK, [], [pid 7760] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7759] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7761] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7760] <... futex resumed>) = 0 [pid 7761] ftruncate(4, 0 [pid 7760] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7761] <... ftruncate resumed>) = 0 [pid 7761] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7759] <... futex resumed>) = 0 [pid 7761] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7759] close(3) = 0 [pid 7759] close(4) = 0 [pid 7759] close(5) = 0 [pid 7759] close(6) = -1 EBADF (Bad file descriptor) [pid 7759] close(7) = -1 EBADF (Bad file descriptor) [pid 7759] close(8) = -1 EBADF (Bad file descriptor) [pid 7759] close(9) = -1 EBADF (Bad file descriptor) [pid 7759] close(10) = -1 EBADF (Bad file descriptor) [pid 7759] close(11) = -1 EBADF (Bad file descriptor) [pid 7759] close(12) = -1 EBADF (Bad file descriptor) [pid 7759] close(13) = -1 EBADF (Bad file descriptor) [pid 7759] close(14) = -1 EBADF (Bad file descriptor) [pid 7759] close(15) = -1 EBADF (Bad file descriptor) [pid 7759] close(16) = -1 EBADF (Bad file descriptor) [pid 7759] close(17) = -1 EBADF (Bad file descriptor) [pid 7759] close(18) = -1 EBADF (Bad file descriptor) [pid 7759] close(19) = -1 EBADF (Bad file descriptor) [pid 7759] close(20) = -1 EBADF (Bad file descriptor) [pid 7759] close(21) = -1 EBADF (Bad file descriptor) [pid 7759] close(22) = -1 EBADF (Bad file descriptor) [pid 7759] close(23) = -1 EBADF (Bad file descriptor) [pid 7759] close(24) = -1 EBADF (Bad file descriptor) [pid 7759] close(25) = -1 EBADF (Bad file descriptor) [pid 7759] close(26) = -1 EBADF (Bad file descriptor) [pid 7759] close(27) = -1 EBADF (Bad file descriptor) [pid 7759] close(28) = -1 EBADF (Bad file descriptor) [pid 7759] close(29) = -1 EBADF (Bad file descriptor) [pid 7759] exit_group(0) = ? [pid 7760] <... futex resumed>) = ? [pid 7761] <... futex resumed>) = ? [pid 7760] +++ exited with 0 +++ [pid 7761] +++ exited with 0 +++ [pid 7759] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2717, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./912", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./912", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./912/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./912/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./912/cgroup.cpu") = 0 [pid 5028] umount2("./912/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./912/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./912/binderfs") = 0 [pid 5028] umount2("./912/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./912/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./912/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./912/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./912/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./912/file0") = 0 [pid 5028] umount2("./912/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./912/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./912/cgroup") = 0 [pid 5028] umount2("./912/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./912/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./912/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./912") = 0 [pid 5028] mkdir("./913", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2720 ./strace-static-x86_64: Process 7762 attached [pid 7762] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7762] chdir("./913") = 0 [pid 7762] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7762] setpgid(0, 0) = 0 [pid 7762] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7762] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7762] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7762] write(3, "1000", 4) = 4 [pid 7762] close(3) = 0 [pid 7762] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7762] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7762] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7762] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7762] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7762] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7762] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7762] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7763 attached [pid 7763] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7763] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7762] <... clone3 resumed> => {parent_tid=[2721]}, 88) = 2721 [pid 7762] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7762] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7762] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7763] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7763] memfd_create("syzkaller", 0) = 3 [pid 7763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7763] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7763] munmap(0x7feef78ae000, 2097152) = 0 [pid 7763] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7763] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7763] close(3) = 0 [pid 7763] mkdir("./file0", 0777) = 0 [pid 7763] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7763] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7763] chdir("./file0") = 0 [pid 7763] ioctl(4, LOOP_CLR_FD) = 0 [pid 7763] close(4) = 0 [pid 7763] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7762] <... futex resumed>) = 0 [pid 7763] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7762] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7762] <... futex resumed>) = 0 [pid 7763] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7762] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7763] <... openat resumed>) = 4 [pid 7763] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7763] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7762] <... futex resumed>) = 0 [pid 7762] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7763] <... futex resumed>) = 0 [pid 7762] <... futex resumed>) = 1 [pid 7763] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7762] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7763] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7763] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7762] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7763] <... futex resumed>) = 0 [pid 7762] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 277.087276][ T7763] loop0: detected capacity change from 0 to 4096 [ 277.109288][ T7763] ntfs: volume version 3.1. [pid 7763] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7762] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7762] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7762] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7762] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7762] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7762] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7764 attached [pid 7764] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7762] <... clone3 resumed> => {parent_tid=[2722]}, 88) = 2722 [pid 7762] rt_sigprocmask(SIG_SETMASK, [], [pid 7764] <... rseq resumed>) = 0 [pid 7762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7764] set_robust_list(0x7feef7aad9a0, 24 [pid 7762] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7764] <... set_robust_list resumed>) = 0 [pid 7763] <... write resumed>) = 1048064 [pid 7763] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7764] rt_sigprocmask(SIG_SETMASK, [], [pid 7763] <... futex resumed>) = 0 [pid 7762] <... futex resumed>) = 0 [pid 7764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7762] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7764] ftruncate(4, 0 [pid 7763] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7764] <... ftruncate resumed>) = 0 [pid 7764] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7762] <... futex resumed>) = 0 [pid 7764] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7762] close(3) = 0 [pid 7762] close(4) = 0 [pid 7762] close(5) = 0 [pid 7762] close(6) = -1 EBADF (Bad file descriptor) [pid 7762] close(7) = -1 EBADF (Bad file descriptor) [pid 7762] close(8) = -1 EBADF (Bad file descriptor) [pid 7762] close(9) = -1 EBADF (Bad file descriptor) [pid 7762] close(10) = -1 EBADF (Bad file descriptor) [pid 7762] close(11) = -1 EBADF (Bad file descriptor) [pid 7762] close(12) = -1 EBADF (Bad file descriptor) [pid 7762] close(13) = -1 EBADF (Bad file descriptor) [pid 7762] close(14) = -1 EBADF (Bad file descriptor) [pid 7762] close(15) = -1 EBADF (Bad file descriptor) [pid 7762] close(16) = -1 EBADF (Bad file descriptor) [pid 7762] close(17) = -1 EBADF (Bad file descriptor) [pid 7762] close(18) = -1 EBADF (Bad file descriptor) [pid 7762] close(19) = -1 EBADF (Bad file descriptor) [pid 7762] close(20) = -1 EBADF (Bad file descriptor) [pid 7762] close(21) = -1 EBADF (Bad file descriptor) [pid 7762] close(22) = -1 EBADF (Bad file descriptor) [pid 7762] close(23) = -1 EBADF (Bad file descriptor) [pid 7762] close(24) = -1 EBADF (Bad file descriptor) [pid 7762] close(25) = -1 EBADF (Bad file descriptor) [pid 7762] close(26) = -1 EBADF (Bad file descriptor) [pid 7762] close(27) = -1 EBADF (Bad file descriptor) [pid 7762] close(28) = -1 EBADF (Bad file descriptor) [pid 7762] close(29) = -1 EBADF (Bad file descriptor) [pid 7762] exit_group(0 [pid 7764] <... futex resumed>) = ? [pid 7762] <... exit_group resumed>) = ? [pid 7763] <... futex resumed>) = ? [pid 7763] +++ exited with 0 +++ [pid 7764] +++ exited with 0 +++ [pid 7762] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2720, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./913", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./913", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./913/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./913/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./913/cgroup.cpu") = 0 [pid 5028] umount2("./913/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./913/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./913/binderfs") = 0 [pid 5028] umount2("./913/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./913/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./913/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./913/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./913/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./913/file0") = 0 [pid 5028] umount2("./913/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./913/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./913/cgroup") = 0 [pid 5028] umount2("./913/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./913/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./913/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./913") = 0 [pid 5028] mkdir("./914", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2723 ./strace-static-x86_64: Process 7765 attached [pid 7765] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7765] chdir("./914") = 0 [pid 7765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7765] setpgid(0, 0) = 0 [pid 7765] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7765] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7765] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7765] write(3, "1000", 4) = 4 [pid 7765] close(3) = 0 [pid 7765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7765] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7765] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7765] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7765] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7766 attached [pid 7766] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7765] <... clone3 resumed> => {parent_tid=[2724]}, 88) = 2724 [pid 7766] <... rseq resumed>) = 0 [pid 7765] rt_sigprocmask(SIG_SETMASK, [], [pid 7766] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7766] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7765] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7766] memfd_create("syzkaller", 0 [pid 7765] <... futex resumed>) = 0 [pid 7766] <... memfd_create resumed>) = 3 [pid 7765] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7766] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7766] munmap(0x7feef78ae000, 2097152) = 0 [pid 7766] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7766] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7766] close(3) = 0 [pid 7766] mkdir("./file0", 0777) = 0 [pid 7766] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7766] chdir("./file0") = 0 [pid 7766] ioctl(4, LOOP_CLR_FD) = 0 [pid 7766] close(4) = 0 [pid 7766] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7765] <... futex resumed>) = 0 [pid 7766] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7765] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7765] <... futex resumed>) = 0 [pid 7766] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7765] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7766] <... openat resumed>) = 4 [pid 7766] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7765] <... futex resumed>) = 0 [pid 7766] <... futex resumed>) = 1 [pid 7765] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7766] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7765] <... futex resumed>) = 0 [pid 7765] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7766] <... openat resumed>) = 5 [pid 7766] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7765] <... futex resumed>) = 0 [pid 7766] <... futex resumed>) = 1 [pid 7765] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7766] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7765] <... futex resumed>) = 0 [ 277.323069][ T7766] loop0: detected capacity change from 0 to 4096 [ 277.345588][ T7766] ntfs: volume version 3.1. [pid 7765] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7765] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7765] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7765] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7765] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7765] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7767 attached [pid 7767] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7765] <... clone3 resumed> => {parent_tid=[2725]}, 88) = 2725 [pid 7767] <... rseq resumed>) = 0 [pid 7765] rt_sigprocmask(SIG_SETMASK, [], [pid 7767] set_robust_list(0x7feef7aad9a0, 24 [pid 7765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7767] <... set_robust_list resumed>) = 0 [pid 7767] rt_sigprocmask(SIG_SETMASK, [], [pid 7765] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7767] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7765] <... futex resumed>) = 0 [pid 7765] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7767] ftruncate(4, 0) = 0 [pid 7767] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7767] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7766] <... write resumed>) = 1048064 [pid 7766] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7766] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7765] <... futex resumed>) = 0 [pid 7765] close(3) = 0 [pid 7765] close(4) = 0 [pid 7765] close(5) = 0 [pid 7765] close(6) = -1 EBADF (Bad file descriptor) [pid 7765] close(7) = -1 EBADF (Bad file descriptor) [pid 7765] close(8) = -1 EBADF (Bad file descriptor) [pid 7765] close(9) = -1 EBADF (Bad file descriptor) [pid 7765] close(10) = -1 EBADF (Bad file descriptor) [pid 7765] close(11) = -1 EBADF (Bad file descriptor) [pid 7765] close(12) = -1 EBADF (Bad file descriptor) [pid 7765] close(13) = -1 EBADF (Bad file descriptor) [pid 7765] close(14) = -1 EBADF (Bad file descriptor) [pid 7765] close(15) = -1 EBADF (Bad file descriptor) [pid 7765] close(16) = -1 EBADF (Bad file descriptor) [pid 7765] close(17) = -1 EBADF (Bad file descriptor) [pid 7765] close(18) = -1 EBADF (Bad file descriptor) [pid 7765] close(19) = -1 EBADF (Bad file descriptor) [pid 7765] close(20) = -1 EBADF (Bad file descriptor) [pid 7765] close(21) = -1 EBADF (Bad file descriptor) [pid 7765] close(22) = -1 EBADF (Bad file descriptor) [pid 7765] close(23) = -1 EBADF (Bad file descriptor) [pid 7765] close(24) = -1 EBADF (Bad file descriptor) [pid 7765] close(25) = -1 EBADF (Bad file descriptor) [pid 7765] close(26) = -1 EBADF (Bad file descriptor) [pid 7765] close(27) = -1 EBADF (Bad file descriptor) [pid 7765] close(28) = -1 EBADF (Bad file descriptor) [pid 7765] close(29) = -1 EBADF (Bad file descriptor) [pid 7765] exit_group(0) = ? [pid 7766] <... futex resumed>) = ? [pid 7767] <... futex resumed>) = ? [pid 7766] +++ exited with 0 +++ [pid 7767] +++ exited with 0 +++ [pid 7765] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2723, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./914", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./914", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./914/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./914/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./914/cgroup.cpu") = 0 [pid 5028] umount2("./914/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./914/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./914/binderfs") = 0 [pid 5028] umount2("./914/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./914/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./914/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./914/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./914/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./914/file0") = 0 [pid 5028] umount2("./914/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./914/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./914/cgroup") = 0 [pid 5028] umount2("./914/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./914/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./914/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./914") = 0 [pid 5028] mkdir("./915", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2726 ./strace-static-x86_64: Process 7768 attached [pid 7768] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7768] chdir("./915") = 0 [pid 7768] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7768] setpgid(0, 0) = 0 [pid 7768] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7768] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7768] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7768] write(3, "1000", 4) = 4 [pid 7768] close(3) = 0 [pid 7768] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7768] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7768] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7768] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7768] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7768] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7768] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7769 attached => {parent_tid=[2727]}, 88) = 2727 [pid 7768] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7768] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7768] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7769] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7769] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7769] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7769] memfd_create("syzkaller", 0) = 3 [pid 7769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7769] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7769] munmap(0x7feef78ae000, 2097152) = 0 [pid 7769] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7769] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7769] close(3) = 0 [pid 7769] mkdir("./file0", 0777) = 0 [ 277.557005][ T7769] loop0: detected capacity change from 0 to 4096 [ 277.565947][ T7769] __ntfs_warning: 11 callbacks suppressed [ 277.565960][ T7769] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7769] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7769] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7769] chdir("./file0") = 0 [pid 7769] ioctl(4, LOOP_CLR_FD) = 0 [pid 7769] close(4) = 0 [pid 7769] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7768] <... futex resumed>) = 0 [pid 7768] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7769] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7768] <... futex resumed>) = 0 [pid 7768] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7769] <... openat resumed>) = 4 [pid 7769] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7769] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7768] <... futex resumed>) = 0 [pid 7768] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7769] <... futex resumed>) = 0 [pid 7768] <... futex resumed>) = 1 [pid 7769] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7768] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7769] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7769] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7768] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7769] <... futex resumed>) = 0 [pid 7768] <... futex resumed>) = 1 [pid 7769] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 277.604646][ T7769] ntfs: volume version 3.1. [pid 7768] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7768] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7768] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7768] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7768] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2728]}, 88) = 2728 [pid 7768] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7770 attached [pid 7770] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7770] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7770] rt_sigprocmask(SIG_SETMASK, [], [pid 7768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7768] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7770] ftruncate(4, 0 [pid 7768] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7770] <... ftruncate resumed>) = 0 [pid 7770] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7769] <... write resumed>) = 1048064 [pid 7770] <... futex resumed>) = 1 [pid 7770] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7768] <... futex resumed>) = 0 [pid 7769] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7769] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7768] close(3) = 0 [pid 7768] close(4) = 0 [pid 7768] close(5) = 0 [pid 7768] close(6) = -1 EBADF (Bad file descriptor) [pid 7768] close(7) = -1 EBADF (Bad file descriptor) [pid 7768] close(8) = -1 EBADF (Bad file descriptor) [pid 7768] close(9) = -1 EBADF (Bad file descriptor) [pid 7768] close(10) = -1 EBADF (Bad file descriptor) [pid 7768] close(11) = -1 EBADF (Bad file descriptor) [pid 7768] close(12) = -1 EBADF (Bad file descriptor) [pid 7768] close(13) = -1 EBADF (Bad file descriptor) [pid 7768] close(14) = -1 EBADF (Bad file descriptor) [pid 7768] close(15) = -1 EBADF (Bad file descriptor) [pid 7768] close(16) = -1 EBADF (Bad file descriptor) [pid 7768] close(17) = -1 EBADF (Bad file descriptor) [pid 7768] close(18) = -1 EBADF (Bad file descriptor) [pid 7768] close(19) = -1 EBADF (Bad file descriptor) [pid 7768] close(20) = -1 EBADF (Bad file descriptor) [pid 7768] close(21) = -1 EBADF (Bad file descriptor) [pid 7768] close(22) = -1 EBADF (Bad file descriptor) [pid 7768] close(23) = -1 EBADF (Bad file descriptor) [pid 7768] close(24) = -1 EBADF (Bad file descriptor) [pid 7768] close(25) = -1 EBADF (Bad file descriptor) [pid 7768] close(26) = -1 EBADF (Bad file descriptor) [pid 7768] close(27) = -1 EBADF (Bad file descriptor) [pid 7768] close(28) = -1 EBADF (Bad file descriptor) [pid 7768] close(29) = -1 EBADF (Bad file descriptor) [pid 7768] exit_group(0) = ? [pid 7770] <... futex resumed>) = ? [pid 7769] <... futex resumed>) = ? [pid 7770] +++ exited with 0 +++ [pid 7769] +++ exited with 0 +++ [pid 7768] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2726, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./915", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./915", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./915/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./915/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./915/cgroup.cpu") = 0 [pid 5028] umount2("./915/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./915/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./915/binderfs") = 0 [pid 5028] umount2("./915/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./915/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./915/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./915/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./915/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./915/file0") = 0 [pid 5028] umount2("./915/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./915/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./915/cgroup") = 0 [pid 5028] umount2("./915/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./915/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./915/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./915") = 0 [pid 5028] mkdir("./916", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2729 ./strace-static-x86_64: Process 7771 attached [pid 7771] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7771] chdir("./916") = 0 [pid 7771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7771] setpgid(0, 0) = 0 [pid 7771] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7771] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7771] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7771] write(3, "1000", 4) = 4 [pid 7771] close(3) = 0 [pid 7771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7771] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7771] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7771] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7771] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7772 attached [pid 7772] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7771] <... clone3 resumed> => {parent_tid=[2730]}, 88) = 2730 [pid 7771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7771] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7772] <... rseq resumed>) = 0 [pid 7772] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7772] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7771] <... futex resumed>) = 0 [pid 7771] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7772] memfd_create("syzkaller", 0) = 3 [pid 7772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7772] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7772] munmap(0x7feef78ae000, 2097152) = 0 [pid 7772] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7772] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7772] close(3) = 0 [pid 7772] mkdir("./file0", 0777) = 0 [pid 7772] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7772] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7772] chdir("./file0") = 0 [pid 7772] ioctl(4, LOOP_CLR_FD) = 0 [pid 7772] close(4) = 0 [pid 7772] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7772] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7771] <... futex resumed>) = 0 [pid 7771] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7771] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7772] <... futex resumed>) = 0 [pid 7772] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7772] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7771] <... futex resumed>) = 0 [pid 7771] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7771] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7772] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7772] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7772] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7771] <... futex resumed>) = 0 [pid 7772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 277.803852][ T7772] loop0: detected capacity change from 0 to 4096 [ 277.813074][ T7772] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 277.846370][ T7772] ntfs: volume version 3.1. [pid 7771] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7772] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7771] <... futex resumed>) = 0 [pid 7771] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7771] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7771] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7773 attached [pid 7773] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7771] <... clone3 resumed> => {parent_tid=[2731]}, 88) = 2731 [pid 7773] <... rseq resumed>) = 0 [pid 7771] rt_sigprocmask(SIG_SETMASK, [], [pid 7773] set_robust_list(0x7feef7aad9a0, 24 [pid 7771] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7771] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7773] <... set_robust_list resumed>) = 0 [pid 7771] <... futex resumed>) = 0 [pid 7773] rt_sigprocmask(SIG_SETMASK, [], [pid 7771] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7773] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7773] ftruncate(4, 0) = 0 [pid 7772] <... write resumed>) = 1048064 [pid 7773] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7772] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7773] <... futex resumed>) = 1 [pid 7772] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7771] <... futex resumed>) = 0 [pid 7773] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7771] close(3) = 0 [pid 7771] close(4) = 0 [pid 7771] close(5) = 0 [pid 7771] close(6) = -1 EBADF (Bad file descriptor) [pid 7771] close(7) = -1 EBADF (Bad file descriptor) [pid 7771] close(8) = -1 EBADF (Bad file descriptor) [pid 7771] close(9) = -1 EBADF (Bad file descriptor) [pid 7771] close(10) = -1 EBADF (Bad file descriptor) [pid 7771] close(11) = -1 EBADF (Bad file descriptor) [pid 7771] close(12) = -1 EBADF (Bad file descriptor) [pid 7771] close(13) = -1 EBADF (Bad file descriptor) [pid 7771] close(14) = -1 EBADF (Bad file descriptor) [pid 7771] close(15) = -1 EBADF (Bad file descriptor) [pid 7771] close(16) = -1 EBADF (Bad file descriptor) [pid 7771] close(17) = -1 EBADF (Bad file descriptor) [pid 7771] close(18) = -1 EBADF (Bad file descriptor) [pid 7771] close(19) = -1 EBADF (Bad file descriptor) [pid 7771] close(20) = -1 EBADF (Bad file descriptor) [pid 7771] close(21) = -1 EBADF (Bad file descriptor) [pid 7771] close(22) = -1 EBADF (Bad file descriptor) [pid 7771] close(23) = -1 EBADF (Bad file descriptor) [pid 7771] close(24) = -1 EBADF (Bad file descriptor) [pid 7771] close(25) = -1 EBADF (Bad file descriptor) [pid 7771] close(26) = -1 EBADF (Bad file descriptor) [pid 7771] close(27) = -1 EBADF (Bad file descriptor) [pid 7771] close(28) = -1 EBADF (Bad file descriptor) [pid 7771] close(29) = -1 EBADF (Bad file descriptor) [pid 7771] exit_group(0 [pid 7773] <... futex resumed>) = ? [pid 7773] +++ exited with 0 +++ [pid 7771] <... exit_group resumed>) = ? [pid 7772] <... futex resumed>) = ? [pid 7772] +++ exited with 0 +++ [pid 7771] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2729, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./916", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./916", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./916/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./916/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./916/cgroup.cpu") = 0 [pid 5028] umount2("./916/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./916/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./916/binderfs") = 0 [pid 5028] umount2("./916/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./916/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./916/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./916/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./916/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./916/file0") = 0 [pid 5028] umount2("./916/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./916/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./916/cgroup") = 0 [pid 5028] umount2("./916/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./916/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./916/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./916") = 0 [pid 5028] mkdir("./917", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7774 attached , child_tidptr=0x5555563a5690) = 2732 [pid 7774] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7774] chdir("./917") = 0 [pid 7774] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7774] setpgid(0, 0) = 0 [pid 7774] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7774] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7774] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7774] write(3, "1000", 4) = 4 [pid 7774] close(3) = 0 [pid 7774] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7774] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7774] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7774] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7774] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7774] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7775 attached => {parent_tid=[2733]}, 88) = 2733 [pid 7774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7774] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7774] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7775] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7775] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7775] memfd_create("syzkaller", 0) = 3 [pid 7775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7775] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7775] munmap(0x7feef78ae000, 2097152) = 0 [pid 7775] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7775] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7775] close(3) = 0 [pid 7775] mkdir("./file0", 0777) = 0 [pid 7775] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7775] chdir("./file0") = 0 [pid 7775] ioctl(4, LOOP_CLR_FD) = 0 [pid 7775] close(4) = 0 [pid 7775] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7774] <... futex resumed>) = 0 [pid 7774] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7774] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7775] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7775] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7774] <... futex resumed>) = 0 [pid 7774] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7774] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7775] <... futex resumed>) = 1 [pid 7775] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7775] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7774] <... futex resumed>) = 0 [pid 7775] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7774] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 278.054867][ T7775] loop0: detected capacity change from 0 to 4096 [ 278.064544][ T7775] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 278.097898][ T7775] ntfs: volume version 3.1. [pid 7774] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7774] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7774] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7774] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7776 attached => {parent_tid=[2734]}, 88) = 2734 [pid 7776] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7774] rt_sigprocmask(SIG_SETMASK, [], [pid 7776] <... rseq resumed>) = 0 [pid 7774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7776] set_robust_list(0x7feef7aad9a0, 24 [pid 7774] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7776] <... set_robust_list resumed>) = 0 [pid 7774] <... futex resumed>) = 0 [pid 7776] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7776] ftruncate(4, 0) = 0 [pid 7774] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7775] <... write resumed>) = 1048064 [pid 7775] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7775] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7776] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7774] <... futex resumed>) = 0 [pid 7774] close(3) = 0 [pid 7776] <... futex resumed>) = 1 [pid 7776] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7774] close(4) = 0 [pid 7774] close(5) = 0 [pid 7774] close(6) = -1 EBADF (Bad file descriptor) [pid 7774] close(7) = -1 EBADF (Bad file descriptor) [pid 7774] close(8) = -1 EBADF (Bad file descriptor) [pid 7774] close(9) = -1 EBADF (Bad file descriptor) [pid 7774] close(10) = -1 EBADF (Bad file descriptor) [pid 7774] close(11) = -1 EBADF (Bad file descriptor) [pid 7774] close(12) = -1 EBADF (Bad file descriptor) [pid 7774] close(13) = -1 EBADF (Bad file descriptor) [pid 7774] close(14) = -1 EBADF (Bad file descriptor) [pid 7774] close(15) = -1 EBADF (Bad file descriptor) [pid 7774] close(16) = -1 EBADF (Bad file descriptor) [pid 7774] close(17) = -1 EBADF (Bad file descriptor) [pid 7774] close(18) = -1 EBADF (Bad file descriptor) [pid 7774] close(19) = -1 EBADF (Bad file descriptor) [pid 7774] close(20) = -1 EBADF (Bad file descriptor) [pid 7774] close(21) = -1 EBADF (Bad file descriptor) [pid 7774] close(22) = -1 EBADF (Bad file descriptor) [pid 7774] close(23) = -1 EBADF (Bad file descriptor) [pid 7774] close(24) = -1 EBADF (Bad file descriptor) [pid 7774] close(25) = -1 EBADF (Bad file descriptor) [pid 7774] close(26) = -1 EBADF (Bad file descriptor) [pid 7774] close(27) = -1 EBADF (Bad file descriptor) [pid 7774] close(28) = -1 EBADF (Bad file descriptor) [pid 7774] close(29) = -1 EBADF (Bad file descriptor) [pid 7774] exit_group(0 [pid 7775] <... futex resumed>) = ? [pid 7774] <... exit_group resumed>) = ? [pid 7776] <... futex resumed>) = ? [pid 7775] +++ exited with 0 +++ [pid 7776] +++ exited with 0 +++ [pid 7774] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2732, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./917", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./917", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./917/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./917/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./917/cgroup.cpu") = 0 [pid 5028] umount2("./917/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./917/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./917/binderfs") = 0 [pid 5028] umount2("./917/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./917/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./917/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./917/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./917/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./917/file0") = 0 [pid 5028] umount2("./917/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./917/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./917/cgroup") = 0 [pid 5028] umount2("./917/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./917/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./917/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./917") = 0 [pid 5028] mkdir("./918", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7777 attached , child_tidptr=0x5555563a5690) = 2735 [pid 7777] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7777] chdir("./918") = 0 [pid 7777] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7777] setpgid(0, 0) = 0 [pid 7777] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7777] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7777] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7777] write(3, "1000", 4) = 4 [pid 7777] close(3) = 0 [pid 7777] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7777] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7777] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7777] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7777] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7777] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7777] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7777] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7778 attached [pid 7778] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7777] <... clone3 resumed> => {parent_tid=[2736]}, 88) = 2736 [pid 7778] <... rseq resumed>) = 0 [pid 7777] rt_sigprocmask(SIG_SETMASK, [], [pid 7778] set_robust_list(0x7feeffcce9a0, 24 [pid 7777] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7778] <... set_robust_list resumed>) = 0 [pid 7778] rt_sigprocmask(SIG_SETMASK, [], [pid 7777] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7777] <... futex resumed>) = 0 [pid 7777] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7778] memfd_create("syzkaller", 0) = 3 [pid 7778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7778] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7778] munmap(0x7feef78ae000, 2097152) = 0 [pid 7778] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7778] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7778] close(3) = 0 [pid 7778] mkdir("./file0", 0777) = 0 [pid 7778] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7778] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7778] chdir("./file0") = 0 [pid 7778] ioctl(4, LOOP_CLR_FD) = 0 [pid 7778] close(4) = 0 [pid 7778] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7778] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7777] <... futex resumed>) = 0 [pid 7777] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7778] <... futex resumed>) = 0 [pid 7778] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7777] <... futex resumed>) = 1 [pid 7777] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7778] <... openat resumed>) = 4 [pid 7778] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] <... futex resumed>) = 0 [pid 7777] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7778] <... futex resumed>) = 1 [pid 7777] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7778] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7778] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] <... futex resumed>) = 0 [pid 7778] <... futex resumed>) = 1 [pid 7777] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7778] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7777] <... futex resumed>) = 0 [ 278.327880][ T7778] loop0: detected capacity change from 0 to 4096 [ 278.336634][ T7778] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 278.368355][ T7778] ntfs: volume version 3.1. [pid 7777] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7777] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7777] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7777] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7777] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7777] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7779 attached => {parent_tid=[2737]}, 88) = 2737 [pid 7779] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7777] rt_sigprocmask(SIG_SETMASK, [], [pid 7779] <... rseq resumed>) = 0 [pid 7777] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7779] set_robust_list(0x7feef7aad9a0, 24 [pid 7777] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7779] <... set_robust_list resumed>) = 0 [pid 7777] <... futex resumed>) = 0 [pid 7779] rt_sigprocmask(SIG_SETMASK, [], [pid 7777] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7779] ftruncate(4, 0) = 0 [pid 7778] <... write resumed>) = 1048064 [pid 7779] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7778] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7777] <... futex resumed>) = 0 [pid 7779] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7778] <... futex resumed>) = 0 [pid 7777] close(3 [pid 7778] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7777] <... close resumed>) = 0 [pid 7777] close(4) = 0 [pid 7777] close(5) = 0 [pid 7777] close(6) = -1 EBADF (Bad file descriptor) [pid 7777] close(7) = -1 EBADF (Bad file descriptor) [pid 7777] close(8) = -1 EBADF (Bad file descriptor) [pid 7777] close(9) = -1 EBADF (Bad file descriptor) [pid 7777] close(10) = -1 EBADF (Bad file descriptor) [pid 7777] close(11) = -1 EBADF (Bad file descriptor) [pid 7777] close(12) = -1 EBADF (Bad file descriptor) [pid 7777] close(13) = -1 EBADF (Bad file descriptor) [pid 7777] close(14) = -1 EBADF (Bad file descriptor) [pid 7777] close(15) = -1 EBADF (Bad file descriptor) [pid 7777] close(16) = -1 EBADF (Bad file descriptor) [pid 7777] close(17) = -1 EBADF (Bad file descriptor) [pid 7777] close(18) = -1 EBADF (Bad file descriptor) [pid 7777] close(19) = -1 EBADF (Bad file descriptor) [pid 7777] close(20) = -1 EBADF (Bad file descriptor) [pid 7777] close(21) = -1 EBADF (Bad file descriptor) [pid 7777] close(22) = -1 EBADF (Bad file descriptor) [pid 7777] close(23) = -1 EBADF (Bad file descriptor) [pid 7777] close(24) = -1 EBADF (Bad file descriptor) [pid 7777] close(25) = -1 EBADF (Bad file descriptor) [pid 7777] close(26) = -1 EBADF (Bad file descriptor) [pid 7777] close(27) = -1 EBADF (Bad file descriptor) [pid 7777] close(28) = -1 EBADF (Bad file descriptor) [pid 7777] close(29) = -1 EBADF (Bad file descriptor) [pid 7777] exit_group(0 [pid 7778] <... futex resumed>) = ? [pid 7778] +++ exited with 0 +++ [pid 7779] <... futex resumed>) = ? [pid 7779] +++ exited with 0 +++ [pid 7777] <... exit_group resumed>) = ? [pid 7777] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2735, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./918", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./918", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./918/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./918/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./918/cgroup.cpu") = 0 [pid 5028] umount2("./918/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./918/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./918/binderfs") = 0 [pid 5028] umount2("./918/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./918/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./918/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./918/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./918/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./918/file0") = 0 [pid 5028] umount2("./918/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./918/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./918/cgroup") = 0 [pid 5028] umount2("./918/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./918/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./918/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./918") = 0 [pid 5028] mkdir("./919", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7780 attached [pid 7780] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2738 [pid 7780] <... set_robust_list resumed>) = 0 [pid 7780] chdir("./919") = 0 [pid 7780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7780] setpgid(0, 0) = 0 [pid 7780] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7780] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7780] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7780] write(3, "1000", 4) = 4 [pid 7780] close(3) = 0 [pid 7780] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7780] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7780] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7780] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7780] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7780] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7781 attached => {parent_tid=[2739]}, 88) = 2739 [pid 7781] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7780] rt_sigprocmask(SIG_SETMASK, [], [pid 7781] <... rseq resumed>) = 0 [pid 7780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7781] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7780] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7780] <... futex resumed>) = 0 [pid 7781] memfd_create("syzkaller", 0) = 3 [pid 7780] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7781] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7781] munmap(0x7feef78ae000, 2097152) = 0 [pid 7781] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7781] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7781] close(3) = 0 [pid 7781] mkdir("./file0", 0777) = 0 [pid 7781] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7781] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7781] chdir("./file0") = 0 [pid 7781] ioctl(4, LOOP_CLR_FD) = 0 [pid 7781] close(4) = 0 [pid 7781] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7780] <... futex resumed>) = 0 [pid 7781] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7780] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7780] <... futex resumed>) = 0 [pid 7781] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7780] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7781] <... openat resumed>) = 4 [ 278.561164][ T7781] loop0: detected capacity change from 0 to 4096 [ 278.570050][ T7781] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 278.602703][ T7781] ntfs: volume version 3.1. [pid 7781] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7780] <... futex resumed>) = 0 [pid 7781] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7780] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7780] <... futex resumed>) = 0 [pid 7781] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7780] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7781] <... openat resumed>) = 5 [pid 7781] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7780] <... futex resumed>) = 0 [pid 7781] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7780] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7780] <... futex resumed>) = 0 [pid 7781] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7780] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7780] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7780] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7780] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7780] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7780] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7782 attached => {parent_tid=[2740]}, 88) = 2740 [pid 7782] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7780] rt_sigprocmask(SIG_SETMASK, [], [pid 7782] <... rseq resumed>) = 0 [pid 7780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7780] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7780] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7782] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7782] ftruncate(4, 0) = 0 [pid 7782] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7781] <... write resumed>) = 1048064 [pid 7780] <... futex resumed>) = 0 [pid 7781] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7782] <... futex resumed>) = 1 [pid 7780] close(3 [pid 7782] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7781] <... futex resumed>) = 0 [pid 7780] <... close resumed>) = 0 [pid 7781] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7780] close(4) = 0 [pid 7780] close(5) = 0 [pid 7780] close(6) = -1 EBADF (Bad file descriptor) [pid 7780] close(7) = -1 EBADF (Bad file descriptor) [pid 7780] close(8) = -1 EBADF (Bad file descriptor) [pid 7780] close(9) = -1 EBADF (Bad file descriptor) [pid 7780] close(10) = -1 EBADF (Bad file descriptor) [pid 7780] close(11) = -1 EBADF (Bad file descriptor) [pid 7780] close(12) = -1 EBADF (Bad file descriptor) [pid 7780] close(13) = -1 EBADF (Bad file descriptor) [pid 7780] close(14) = -1 EBADF (Bad file descriptor) [pid 7780] close(15) = -1 EBADF (Bad file descriptor) [pid 7780] close(16) = -1 EBADF (Bad file descriptor) [pid 7780] close(17) = -1 EBADF (Bad file descriptor) [pid 7780] close(18) = -1 EBADF (Bad file descriptor) [pid 7780] close(19) = -1 EBADF (Bad file descriptor) [pid 7780] close(20) = -1 EBADF (Bad file descriptor) [pid 7780] close(21) = -1 EBADF (Bad file descriptor) [pid 7780] close(22) = -1 EBADF (Bad file descriptor) [pid 7780] close(23) = -1 EBADF (Bad file descriptor) [pid 7780] close(24) = -1 EBADF (Bad file descriptor) [pid 7780] close(25) = -1 EBADF (Bad file descriptor) [pid 7780] close(26) = -1 EBADF (Bad file descriptor) [pid 7780] close(27) = -1 EBADF (Bad file descriptor) [pid 7780] close(28) = -1 EBADF (Bad file descriptor) [pid 7780] close(29) = -1 EBADF (Bad file descriptor) [pid 7780] exit_group(0 [pid 7782] <... futex resumed>) = ? [pid 7780] <... exit_group resumed>) = ? [pid 7781] <... futex resumed>) = ? [pid 7782] +++ exited with 0 +++ [pid 7781] +++ exited with 0 +++ [pid 7780] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2738, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./919", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./919", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./919/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./919/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./919/cgroup.cpu") = 0 [pid 5028] umount2("./919/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./919/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./919/binderfs") = 0 [pid 5028] umount2("./919/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./919/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./919/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./919/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./919/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./919/file0") = 0 [pid 5028] umount2("./919/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./919/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./919/cgroup") = 0 [pid 5028] umount2("./919/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./919/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./919/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./919") = 0 [pid 5028] mkdir("./920", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7783 attached , child_tidptr=0x5555563a5690) = 2741 [pid 7783] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7783] chdir("./920") = 0 [pid 7783] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7783] setpgid(0, 0) = 0 [pid 7783] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7783] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7783] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7783] write(3, "1000", 4) = 4 [pid 7783] close(3) = 0 [pid 7783] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7783] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7783] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7783] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7783] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7783] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7783] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7784 attached => {parent_tid=[2742]}, 88) = 2742 [pid 7784] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7784] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7784] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7784] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7783] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] <... futex resumed>) = 0 [pid 7783] <... futex resumed>) = 1 [pid 7784] memfd_create("syzkaller", 0 [pid 7783] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7784] <... memfd_create resumed>) = 3 [pid 7784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7784] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7784] munmap(0x7feef78ae000, 2097152) = 0 [pid 7784] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7784] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7784] close(3) = 0 [pid 7784] mkdir("./file0", 0777) = 0 [pid 7784] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7784] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7784] chdir("./file0") = 0 [pid 7784] ioctl(4, LOOP_CLR_FD) = 0 [pid 7784] close(4) = 0 [pid 7784] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7784] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7783] <... futex resumed>) = 0 [pid 7783] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7784] <... futex resumed>) = 0 [pid 7784] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7783] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7784] <... openat resumed>) = 4 [pid 7784] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7783] <... futex resumed>) = 0 [pid 7783] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] <... futex resumed>) = 1 [pid 7783] <... futex resumed>) = 0 [pid 7784] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7783] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7784] <... openat resumed>) = 5 [pid 7784] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7783] <... futex resumed>) = 0 [pid 7783] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] <... futex resumed>) = 1 [pid 7783] <... futex resumed>) = 0 [pid 7784] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 278.821103][ T7784] loop0: detected capacity change from 0 to 4096 [ 278.830602][ T7784] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 278.864740][ T7784] ntfs: volume version 3.1. [pid 7783] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7783] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7783] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7783] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7783] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7783] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7785 attached [pid 7785] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7783] <... clone3 resumed> => {parent_tid=[2743]}, 88) = 2743 [pid 7785] <... rseq resumed>) = 0 [pid 7783] rt_sigprocmask(SIG_SETMASK, [], [pid 7785] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7783] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7785] rt_sigprocmask(SIG_SETMASK, [], [pid 7783] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7783] <... futex resumed>) = 0 [pid 7785] ftruncate(4, 0 [pid 7783] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7785] <... ftruncate resumed>) = 0 [pid 7785] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7784] <... write resumed>) = 1048064 [pid 7785] <... futex resumed>) = 1 [pid 7783] <... futex resumed>) = 0 [pid 7785] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7784] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7784] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7783] close(3) = 0 [pid 7783] close(4) = 0 [pid 7783] close(5) = 0 [pid 7783] close(6) = -1 EBADF (Bad file descriptor) [pid 7783] close(7) = -1 EBADF (Bad file descriptor) [pid 7783] close(8) = -1 EBADF (Bad file descriptor) [pid 7783] close(9) = -1 EBADF (Bad file descriptor) [pid 7783] close(10) = -1 EBADF (Bad file descriptor) [pid 7783] close(11) = -1 EBADF (Bad file descriptor) [pid 7783] close(12) = -1 EBADF (Bad file descriptor) [pid 7783] close(13) = -1 EBADF (Bad file descriptor) [pid 7783] close(14) = -1 EBADF (Bad file descriptor) [pid 7783] close(15) = -1 EBADF (Bad file descriptor) [pid 7783] close(16) = -1 EBADF (Bad file descriptor) [pid 7783] close(17) = -1 EBADF (Bad file descriptor) [pid 7783] close(18) = -1 EBADF (Bad file descriptor) [pid 7783] close(19) = -1 EBADF (Bad file descriptor) [pid 7783] close(20) = -1 EBADF (Bad file descriptor) [pid 7783] close(21) = -1 EBADF (Bad file descriptor) [pid 7783] close(22) = -1 EBADF (Bad file descriptor) [pid 7783] close(23) = -1 EBADF (Bad file descriptor) [pid 7783] close(24) = -1 EBADF (Bad file descriptor) [pid 7783] close(25) = -1 EBADF (Bad file descriptor) [pid 7783] close(26) = -1 EBADF (Bad file descriptor) [pid 7783] close(27) = -1 EBADF (Bad file descriptor) [pid 7783] close(28) = -1 EBADF (Bad file descriptor) [pid 7783] close(29) = -1 EBADF (Bad file descriptor) [pid 7783] exit_group(0) = ? [pid 7784] <... futex resumed>) = ? [pid 7785] <... futex resumed>) = ? [pid 7784] +++ exited with 0 +++ [pid 7785] +++ exited with 0 +++ [pid 7783] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2741, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./920", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./920", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./920/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./920/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./920/cgroup.cpu") = 0 [pid 5028] umount2("./920/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./920/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./920/binderfs") = 0 [pid 5028] umount2("./920/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./920/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./920/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./920/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./920/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./920/file0") = 0 [pid 5028] umount2("./920/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./920/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./920/cgroup") = 0 [pid 5028] umount2("./920/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./920/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./920/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./920") = 0 [pid 5028] mkdir("./921", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7786 attached , child_tidptr=0x5555563a5690) = 2744 [pid 7786] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7786] chdir("./921") = 0 [pid 7786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7786] setpgid(0, 0) = 0 [pid 7786] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7786] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7786] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7786] write(3, "1000", 4) = 4 [pid 7786] close(3) = 0 [pid 7786] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7786] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7786] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7786] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7786] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7786] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7787 attached => {parent_tid=[2745]}, 88) = 2745 [pid 7787] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7786] rt_sigprocmask(SIG_SETMASK, [], [pid 7787] <... rseq resumed>) = 0 [pid 7786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7787] set_robust_list(0x7feeffcce9a0, 24 [pid 7786] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7787] <... set_robust_list resumed>) = 0 [pid 7786] <... futex resumed>) = 0 [pid 7787] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7786] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7787] memfd_create("syzkaller", 0) = 3 [pid 7787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7787] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7787] munmap(0x7feef78ae000, 2097152) = 0 [pid 7787] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7787] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7787] close(3) = 0 [pid 7787] mkdir("./file0", 0777) = 0 [pid 7787] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7787] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7787] chdir("./file0") = 0 [pid 7787] ioctl(4, LOOP_CLR_FD) = 0 [pid 7787] close(4) = 0 [pid 7787] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7786] <... futex resumed>) = 0 [pid 7786] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7786] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7787] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7787] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7787] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7786] <... futex resumed>) = 0 [pid 7786] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7787] <... futex resumed>) = 0 [pid 7787] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7786] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7787] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 279.039625][ T7787] loop0: detected capacity change from 0 to 4096 [ 279.048762][ T7787] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.080696][ T7787] ntfs: volume version 3.1. [pid 7787] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7786] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7786] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7787] <... futex resumed>) = 0 [pid 7786] <... futex resumed>) = 1 [pid 7787] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7786] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7786] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7786] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7786] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7786] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7788 attached [pid 7788] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7786] <... clone3 resumed> => {parent_tid=[2746]}, 88) = 2746 [pid 7788] <... rseq resumed>) = 0 [pid 7786] rt_sigprocmask(SIG_SETMASK, [], [pid 7788] set_robust_list(0x7feef7aad9a0, 24 [pid 7786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7786] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7788] <... set_robust_list resumed>) = 0 [pid 7788] rt_sigprocmask(SIG_SETMASK, [], [pid 7786] <... futex resumed>) = 0 [pid 7788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7786] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7788] ftruncate(4, 0) = 0 [pid 7788] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7788] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7786] <... futex resumed>) = 0 [pid 7787] <... write resumed>) = 1048064 [pid 7787] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7787] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7786] close(3) = 0 [pid 7786] close(4) = 0 [pid 7786] close(5) = 0 [pid 7786] close(6) = -1 EBADF (Bad file descriptor) [pid 7786] close(7) = -1 EBADF (Bad file descriptor) [pid 7786] close(8) = -1 EBADF (Bad file descriptor) [pid 7786] close(9) = -1 EBADF (Bad file descriptor) [pid 7786] close(10) = -1 EBADF (Bad file descriptor) [pid 7786] close(11) = -1 EBADF (Bad file descriptor) [pid 7786] close(12) = -1 EBADF (Bad file descriptor) [pid 7786] close(13) = -1 EBADF (Bad file descriptor) [pid 7786] close(14) = -1 EBADF (Bad file descriptor) [pid 7786] close(15) = -1 EBADF (Bad file descriptor) [pid 7786] close(16) = -1 EBADF (Bad file descriptor) [pid 7786] close(17) = -1 EBADF (Bad file descriptor) [pid 7786] close(18) = -1 EBADF (Bad file descriptor) [pid 7786] close(19) = -1 EBADF (Bad file descriptor) [pid 7786] close(20) = -1 EBADF (Bad file descriptor) [pid 7786] close(21) = -1 EBADF (Bad file descriptor) [pid 7786] close(22) = -1 EBADF (Bad file descriptor) [pid 7786] close(23) = -1 EBADF (Bad file descriptor) [pid 7786] close(24) = -1 EBADF (Bad file descriptor) [pid 7786] close(25) = -1 EBADF (Bad file descriptor) [pid 7786] close(26) = -1 EBADF (Bad file descriptor) [pid 7786] close(27) = -1 EBADF (Bad file descriptor) [pid 7786] close(28) = -1 EBADF (Bad file descriptor) [pid 7786] close(29) = -1 EBADF (Bad file descriptor) [pid 7786] exit_group(0 [pid 7787] <... futex resumed>) = ? [pid 7786] <... exit_group resumed>) = ? [pid 7788] <... futex resumed>) = ? [pid 7787] +++ exited with 0 +++ [pid 7788] +++ exited with 0 +++ [pid 7786] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2744, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./921", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./921", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./921/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./921/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./921/cgroup.cpu") = 0 [pid 5028] umount2("./921/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./921/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./921/binderfs") = 0 [pid 5028] umount2("./921/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./921/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./921/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./921/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./921/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./921/file0") = 0 [pid 5028] umount2("./921/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./921/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./921/cgroup") = 0 [pid 5028] umount2("./921/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./921/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./921/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./921") = 0 [pid 5028] mkdir("./922", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7789 attached [pid 7789] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2747 [pid 7789] <... set_robust_list resumed>) = 0 [pid 7789] chdir("./922") = 0 [pid 7789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7789] setpgid(0, 0) = 0 [pid 7789] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7789] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7789] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7789] write(3, "1000", 4) = 4 [pid 7789] close(3) = 0 [pid 7789] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7789] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7789] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7789] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7789] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7789] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7789] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7790 attached [pid 7790] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7789] <... clone3 resumed> => {parent_tid=[2748]}, 88) = 2748 [pid 7790] <... rseq resumed>) = 0 [pid 7789] rt_sigprocmask(SIG_SETMASK, [], [pid 7790] set_robust_list(0x7feeffcce9a0, 24 [pid 7789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7790] <... set_robust_list resumed>) = 0 [pid 7789] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7790] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7789] <... futex resumed>) = 0 [pid 7790] memfd_create("syzkaller", 0 [pid 7789] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7790] <... memfd_create resumed>) = 3 [pid 7790] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7790] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7790] munmap(0x7feef78ae000, 2097152) = 0 [pid 7790] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7790] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7790] close(3) = 0 [pid 7790] mkdir("./file0", 0777) = 0 [pid 7790] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7790] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7790] chdir("./file0") = 0 [pid 7790] ioctl(4, LOOP_CLR_FD) = 0 [pid 7790] close(4) = 0 [pid 7790] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] <... futex resumed>) = 0 [pid 7789] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7789] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7790] <... futex resumed>) = 1 [pid 7790] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7790] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7789] <... futex resumed>) = 0 [pid 7790] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7789] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7789] <... futex resumed>) = 0 [pid 7790] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7789] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7790] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7789] <... futex resumed>) = 0 [pid 7789] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7790] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7789] <... futex resumed>) = 0 [ 279.296305][ T7790] loop0: detected capacity change from 0 to 4096 [ 279.305037][ T7790] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.338084][ T7790] ntfs: volume version 3.1. [pid 7789] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7789] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7789] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7789] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7789] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7791 attached [pid 7791] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7789] <... clone3 resumed> => {parent_tid=[2749]}, 88) = 2749 [pid 7791] set_robust_list(0x7feef7aad9a0, 24 [pid 7789] rt_sigprocmask(SIG_SETMASK, [], [pid 7791] <... set_robust_list resumed>) = 0 [pid 7789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7789] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7789] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7791] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7791] ftruncate(4, 0) = 0 [pid 7791] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7790] <... write resumed>) = 1048064 [pid 7789] <... futex resumed>) = 0 [pid 7790] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7789] close(3 [pid 7790] <... futex resumed>) = 0 [pid 7791] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7790] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7789] <... close resumed>) = 0 [pid 7789] close(4) = 0 [pid 7789] close(5) = 0 [pid 7789] close(6) = -1 EBADF (Bad file descriptor) [pid 7789] close(7) = -1 EBADF (Bad file descriptor) [pid 7789] close(8) = -1 EBADF (Bad file descriptor) [pid 7789] close(9) = -1 EBADF (Bad file descriptor) [pid 7789] close(10) = -1 EBADF (Bad file descriptor) [pid 7789] close(11) = -1 EBADF (Bad file descriptor) [pid 7789] close(12) = -1 EBADF (Bad file descriptor) [pid 7789] close(13) = -1 EBADF (Bad file descriptor) [pid 7789] close(14) = -1 EBADF (Bad file descriptor) [pid 7789] close(15) = -1 EBADF (Bad file descriptor) [pid 7789] close(16) = -1 EBADF (Bad file descriptor) [pid 7789] close(17) = -1 EBADF (Bad file descriptor) [pid 7789] close(18) = -1 EBADF (Bad file descriptor) [pid 7789] close(19) = -1 EBADF (Bad file descriptor) [pid 7789] close(20) = -1 EBADF (Bad file descriptor) [pid 7789] close(21) = -1 EBADF (Bad file descriptor) [pid 7789] close(22) = -1 EBADF (Bad file descriptor) [pid 7789] close(23) = -1 EBADF (Bad file descriptor) [pid 7789] close(24) = -1 EBADF (Bad file descriptor) [pid 7789] close(25) = -1 EBADF (Bad file descriptor) [pid 7789] close(26) = -1 EBADF (Bad file descriptor) [pid 7789] close(27) = -1 EBADF (Bad file descriptor) [pid 7789] close(28) = -1 EBADF (Bad file descriptor) [pid 7789] close(29) = -1 EBADF (Bad file descriptor) [pid 7789] exit_group(0) = ? [pid 7790] <... futex resumed>) = ? [pid 7791] <... futex resumed>) = ? [pid 7791] +++ exited with 0 +++ [pid 7790] +++ exited with 0 +++ [pid 7789] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2747, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./922", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./922", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./922/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./922/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./922/cgroup.cpu") = 0 [pid 5028] umount2("./922/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./922/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./922/binderfs") = 0 [pid 5028] umount2("./922/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./922/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./922/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./922/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./922/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./922/file0") = 0 [pid 5028] umount2("./922/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./922/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./922/cgroup") = 0 [pid 5028] umount2("./922/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./922/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./922/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./922") = 0 [pid 5028] mkdir("./923", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7792 attached , child_tidptr=0x5555563a5690) = 2750 [pid 7792] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7792] chdir("./923") = 0 [pid 7792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7792] setpgid(0, 0) = 0 [pid 7792] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7792] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7792] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7792] write(3, "1000", 4) = 4 [pid 7792] close(3) = 0 [pid 7792] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7792] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7792] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7792] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7792] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7792] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7792] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7793 attached => {parent_tid=[2751]}, 88) = 2751 [pid 7793] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7792] rt_sigprocmask(SIG_SETMASK, [], [pid 7793] <... rseq resumed>) = 0 [pid 7793] set_robust_list(0x7feeffcce9a0, 24 [pid 7792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7793] <... set_robust_list resumed>) = 0 [pid 7793] rt_sigprocmask(SIG_SETMASK, [], [pid 7792] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7792] <... futex resumed>) = 0 [pid 7793] memfd_create("syzkaller", 0 [pid 7792] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7793] <... memfd_create resumed>) = 3 [pid 7793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7793] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7793] munmap(0x7feef78ae000, 2097152) = 0 [pid 7793] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7793] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7793] close(3) = 0 [pid 7793] mkdir("./file0", 0777) = 0 [pid 7793] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7793] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7793] chdir("./file0") = 0 [pid 7793] ioctl(4, LOOP_CLR_FD) = 0 [pid 7793] close(4) = 0 [pid 7793] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7792] <... futex resumed>) = 0 [pid 7792] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7793] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7792] <... futex resumed>) = 0 [pid 7792] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7793] <... openat resumed>) = 4 [pid 7793] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7793] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7792] <... futex resumed>) = 0 [pid 7792] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7793] <... futex resumed>) = 0 [pid 7792] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7793] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7793] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7792] <... futex resumed>) = 0 [pid 7792] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7793] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7792] <... futex resumed>) = 0 [ 279.519047][ T7793] loop0: detected capacity change from 0 to 4096 [ 279.528439][ T7793] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.560249][ T7793] ntfs: volume version 3.1. [pid 7792] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7792] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7792] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7792] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7792] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7792] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7794 attached => {parent_tid=[2752]}, 88) = 2752 [pid 7794] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7792] rt_sigprocmask(SIG_SETMASK, [], [pid 7794] <... rseq resumed>) = 0 [pid 7792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7794] set_robust_list(0x7feef7aad9a0, 24 [pid 7792] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7794] <... set_robust_list resumed>) = 0 [pid 7792] <... futex resumed>) = 0 [pid 7794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7792] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7794] ftruncate(4, 0) = 0 [pid 7794] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7793] <... write resumed>) = 1048064 [pid 7793] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7793] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7794] <... futex resumed>) = 1 [pid 7794] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7792] <... futex resumed>) = 0 [pid 7792] close(3) = 0 [pid 7792] close(4) = 0 [pid 7792] close(5) = 0 [pid 7792] close(6) = -1 EBADF (Bad file descriptor) [pid 7792] close(7) = -1 EBADF (Bad file descriptor) [pid 7792] close(8) = -1 EBADF (Bad file descriptor) [pid 7792] close(9) = -1 EBADF (Bad file descriptor) [pid 7792] close(10) = -1 EBADF (Bad file descriptor) [pid 7792] close(11) = -1 EBADF (Bad file descriptor) [pid 7792] close(12) = -1 EBADF (Bad file descriptor) [pid 7792] close(13) = -1 EBADF (Bad file descriptor) [pid 7792] close(14) = -1 EBADF (Bad file descriptor) [pid 7792] close(15) = -1 EBADF (Bad file descriptor) [pid 7792] close(16) = -1 EBADF (Bad file descriptor) [pid 7792] close(17) = -1 EBADF (Bad file descriptor) [pid 7792] close(18) = -1 EBADF (Bad file descriptor) [pid 7792] close(19) = -1 EBADF (Bad file descriptor) [pid 7792] close(20) = -1 EBADF (Bad file descriptor) [pid 7792] close(21) = -1 EBADF (Bad file descriptor) [pid 7792] close(22) = -1 EBADF (Bad file descriptor) [pid 7792] close(23) = -1 EBADF (Bad file descriptor) [pid 7792] close(24) = -1 EBADF (Bad file descriptor) [pid 7792] close(25) = -1 EBADF (Bad file descriptor) [pid 7792] close(26) = -1 EBADF (Bad file descriptor) [pid 7792] close(27) = -1 EBADF (Bad file descriptor) [pid 7792] close(28) = -1 EBADF (Bad file descriptor) [pid 7792] close(29) = -1 EBADF (Bad file descriptor) [pid 7792] exit_group(0 [pid 7794] <... futex resumed>) = ? [pid 7793] <... futex resumed>) = ? [pid 7792] <... exit_group resumed>) = ? [pid 7794] +++ exited with 0 +++ [pid 7793] +++ exited with 0 +++ [pid 7792] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2750, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./923", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./923", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./923/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./923/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./923/cgroup.cpu") = 0 [pid 5028] umount2("./923/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./923/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./923/binderfs") = 0 [pid 5028] umount2("./923/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./923/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./923/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./923/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./923/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./923/file0") = 0 [pid 5028] umount2("./923/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./923/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./923/cgroup") = 0 [pid 5028] umount2("./923/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./923/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./923/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./923") = 0 [pid 5028] mkdir("./924", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7795 attached , child_tidptr=0x5555563a5690) = 2753 [pid 7795] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7795] chdir("./924") = 0 [pid 7795] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7795] setpgid(0, 0) = 0 [pid 7795] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7795] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7795] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7795] write(3, "1000", 4) = 4 [pid 7795] close(3) = 0 [pid 7795] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7795] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7795] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7795] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7795] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7795] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7796 attached [pid 7796] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7795] <... clone3 resumed> => {parent_tid=[2754]}, 88) = 2754 [pid 7796] <... rseq resumed>) = 0 [pid 7795] rt_sigprocmask(SIG_SETMASK, [], [pid 7796] set_robust_list(0x7feeffcce9a0, 24 [pid 7795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7796] <... set_robust_list resumed>) = 0 [pid 7796] rt_sigprocmask(SIG_SETMASK, [], [pid 7795] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7796] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7796] memfd_create("syzkaller", 0 [pid 7795] <... futex resumed>) = 0 [pid 7795] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7796] <... memfd_create resumed>) = 3 [pid 7796] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7796] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7796] munmap(0x7feef78ae000, 2097152) = 0 [pid 7796] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7796] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7796] close(3) = 0 [pid 7796] mkdir("./file0", 0777) = 0 [pid 7796] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7796] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7796] chdir("./file0") = 0 [pid 7796] ioctl(4, LOOP_CLR_FD) = 0 [pid 7796] close(4) = 0 [pid 7796] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7795] <... futex resumed>) = 0 [pid 7795] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7796] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7795] <... futex resumed>) = 0 [pid 7795] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7796] <... openat resumed>) = 4 [pid 7796] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7796] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7795] <... futex resumed>) = 0 [pid 7795] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7795] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7796] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7796] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7795] <... futex resumed>) = 0 [pid 7795] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7796] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 279.752856][ T7796] loop0: detected capacity change from 0 to 4096 [ 279.761971][ T7796] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.794944][ T7796] ntfs: volume version 3.1. [pid 7795] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7795] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7795] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7795] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7797 attached => {parent_tid=[2755]}, 88) = 2755 [pid 7797] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7795] rt_sigprocmask(SIG_SETMASK, [], [pid 7797] <... rseq resumed>) = 0 [pid 7797] set_robust_list(0x7feef7aad9a0, 24 [pid 7795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7795] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7797] <... set_robust_list resumed>) = 0 [pid 7795] <... futex resumed>) = 0 [pid 7795] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7797] ftruncate(4, 0) = 0 [pid 7797] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7796] <... write resumed>) = 1048064 [pid 7797] <... futex resumed>) = 1 [pid 7796] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7795] <... futex resumed>) = 0 [pid 7797] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7795] close(3 [pid 7796] <... futex resumed>) = 0 [pid 7796] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7795] <... close resumed>) = 0 [pid 7795] close(4) = 0 [pid 7795] close(5) = 0 [pid 7795] close(6) = -1 EBADF (Bad file descriptor) [pid 7795] close(7) = -1 EBADF (Bad file descriptor) [pid 7795] close(8) = -1 EBADF (Bad file descriptor) [pid 7795] close(9) = -1 EBADF (Bad file descriptor) [pid 7795] close(10) = -1 EBADF (Bad file descriptor) [pid 7795] close(11) = -1 EBADF (Bad file descriptor) [pid 7795] close(12) = -1 EBADF (Bad file descriptor) [pid 7795] close(13) = -1 EBADF (Bad file descriptor) [pid 7795] close(14) = -1 EBADF (Bad file descriptor) [pid 7795] close(15) = -1 EBADF (Bad file descriptor) [pid 7795] close(16) = -1 EBADF (Bad file descriptor) [pid 7795] close(17) = -1 EBADF (Bad file descriptor) [pid 7795] close(18) = -1 EBADF (Bad file descriptor) [pid 7795] close(19) = -1 EBADF (Bad file descriptor) [pid 7795] close(20) = -1 EBADF (Bad file descriptor) [pid 7795] close(21) = -1 EBADF (Bad file descriptor) [pid 7795] close(22) = -1 EBADF (Bad file descriptor) [pid 7795] close(23) = -1 EBADF (Bad file descriptor) [pid 7795] close(24) = -1 EBADF (Bad file descriptor) [pid 7795] close(25) = -1 EBADF (Bad file descriptor) [pid 7795] close(26) = -1 EBADF (Bad file descriptor) [pid 7795] close(27) = -1 EBADF (Bad file descriptor) [pid 7795] close(28) = -1 EBADF (Bad file descriptor) [pid 7795] close(29) = -1 EBADF (Bad file descriptor) [pid 7795] exit_group(0) = ? [pid 7796] <... futex resumed>) = ? [pid 7797] <... futex resumed>) = ? [pid 7797] +++ exited with 0 +++ [pid 7796] +++ exited with 0 +++ [pid 7795] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2753, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./924", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./924", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./924/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./924/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./924/cgroup.cpu") = 0 [pid 5028] umount2("./924/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./924/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./924/binderfs") = 0 [pid 5028] umount2("./924/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./924/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./924/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./924/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./924/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./924/file0") = 0 [pid 5028] umount2("./924/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./924/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./924/cgroup") = 0 [pid 5028] umount2("./924/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./924/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./924/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./924") = 0 [pid 5028] mkdir("./925", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7798 attached [pid 7798] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2756 [pid 7798] <... set_robust_list resumed>) = 0 [pid 7798] chdir("./925") = 0 [pid 7798] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7798] setpgid(0, 0) = 0 [pid 7798] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7798] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7798] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7798] write(3, "1000", 4) = 4 [pid 7798] close(3) = 0 [pid 7798] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7798] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7798] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7798] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7798] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7798] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7798] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7799 attached [pid 7799] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7798] <... clone3 resumed> => {parent_tid=[2757]}, 88) = 2757 [pid 7799] set_robust_list(0x7feeffcce9a0, 24 [pid 7798] rt_sigprocmask(SIG_SETMASK, [], [pid 7799] <... set_robust_list resumed>) = 0 [pid 7798] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7799] rt_sigprocmask(SIG_SETMASK, [], [pid 7798] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7799] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7798] <... futex resumed>) = 0 [pid 7798] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7799] memfd_create("syzkaller", 0) = 3 [pid 7799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7799] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7799] munmap(0x7feef78ae000, 2097152) = 0 [pid 7799] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7799] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7799] close(3) = 0 [pid 7799] mkdir("./file0", 0777) = 0 [pid 7799] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7799] chdir("./file0") = 0 [pid 7799] ioctl(4, LOOP_CLR_FD) = 0 [pid 7799] close(4) = 0 [pid 7799] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7798] <... futex resumed>) = 0 [pid 7798] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7798] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7799] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7799] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7798] <... futex resumed>) = 0 [pid 7798] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7798] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7799] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7799] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7798] <... futex resumed>) = 0 [pid 7799] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7798] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7799] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7798] <... futex resumed>) = 0 [ 280.025589][ T7799] loop0: detected capacity change from 0 to 4096 [ 280.045677][ T7799] ntfs: volume version 3.1. [pid 7798] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7798] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7798] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7798] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7798] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7798] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7800 attached [pid 7800] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7798] <... clone3 resumed> => {parent_tid=[2758]}, 88) = 2758 [pid 7800] set_robust_list(0x7feef7aad9a0, 24 [pid 7798] rt_sigprocmask(SIG_SETMASK, [], [pid 7800] <... set_robust_list resumed>) = 0 [pid 7798] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7798] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7800] ftruncate(4, 0 [pid 7798] <... futex resumed>) = 0 [pid 7800] <... ftruncate resumed>) = 0 [pid 7798] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7800] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7799] <... write resumed>) = 1048064 [pid 7798] <... futex resumed>) = 0 [pid 7800] <... futex resumed>) = 1 [pid 7800] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7799] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7799] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7798] close(3) = 0 [pid 7798] close(4) = 0 [pid 7798] close(5) = 0 [pid 7798] close(6) = -1 EBADF (Bad file descriptor) [pid 7798] close(7) = -1 EBADF (Bad file descriptor) [pid 7798] close(8) = -1 EBADF (Bad file descriptor) [pid 7798] close(9) = -1 EBADF (Bad file descriptor) [pid 7798] close(10) = -1 EBADF (Bad file descriptor) [pid 7798] close(11) = -1 EBADF (Bad file descriptor) [pid 7798] close(12) = -1 EBADF (Bad file descriptor) [pid 7798] close(13) = -1 EBADF (Bad file descriptor) [pid 7798] close(14) = -1 EBADF (Bad file descriptor) [pid 7798] close(15) = -1 EBADF (Bad file descriptor) [pid 7798] close(16) = -1 EBADF (Bad file descriptor) [pid 7798] close(17) = -1 EBADF (Bad file descriptor) [pid 7798] close(18) = -1 EBADF (Bad file descriptor) [pid 7798] close(19) = -1 EBADF (Bad file descriptor) [pid 7798] close(20) = -1 EBADF (Bad file descriptor) [pid 7798] close(21) = -1 EBADF (Bad file descriptor) [pid 7798] close(22) = -1 EBADF (Bad file descriptor) [pid 7798] close(23) = -1 EBADF (Bad file descriptor) [pid 7798] close(24) = -1 EBADF (Bad file descriptor) [pid 7798] close(25) = -1 EBADF (Bad file descriptor) [pid 7798] close(26) = -1 EBADF (Bad file descriptor) [pid 7798] close(27) = -1 EBADF (Bad file descriptor) [pid 7798] close(28) = -1 EBADF (Bad file descriptor) [pid 7798] close(29) = -1 EBADF (Bad file descriptor) [pid 7798] exit_group(0 [pid 7799] <... futex resumed>) = ? [pid 7800] <... futex resumed>) = ? [pid 7798] <... exit_group resumed>) = ? [pid 7800] +++ exited with 0 +++ [pid 7799] +++ exited with 0 +++ [pid 7798] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2756, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./925", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./925", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./925/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./925/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./925/cgroup.cpu") = 0 [pid 5028] umount2("./925/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./925/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./925/binderfs") = 0 [pid 5028] umount2("./925/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./925/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./925/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./925/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./925/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./925/file0") = 0 [pid 5028] umount2("./925/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./925/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./925/cgroup") = 0 [pid 5028] umount2("./925/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./925/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./925/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./925") = 0 [pid 5028] mkdir("./926", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7801 attached , child_tidptr=0x5555563a5690) = 2759 [pid 7801] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7801] chdir("./926") = 0 [pid 7801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7801] setpgid(0, 0) = 0 [pid 7801] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7801] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7801] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7801] write(3, "1000", 4) = 4 [pid 7801] close(3) = 0 [pid 7801] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7801] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7801] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7801] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7801] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7802 attached [pid 7802] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7801] <... clone3 resumed> => {parent_tid=[2760]}, 88) = 2760 [pid 7802] <... rseq resumed>) = 0 [pid 7801] rt_sigprocmask(SIG_SETMASK, [], [pid 7802] set_robust_list(0x7feeffcce9a0, 24 [pid 7801] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7802] <... set_robust_list resumed>) = 0 [pid 7802] rt_sigprocmask(SIG_SETMASK, [], [pid 7801] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7802] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7801] <... futex resumed>) = 0 [pid 7802] memfd_create("syzkaller", 0) = 3 [pid 7801] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7802] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7802] munmap(0x7feef78ae000, 2097152) = 0 [pid 7802] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7802] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7802] close(3) = 0 [pid 7802] mkdir("./file0", 0777) = 0 [pid 7802] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7802] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7802] chdir("./file0") = 0 [pid 7802] ioctl(4, LOOP_CLR_FD) = 0 [pid 7802] close(4) = 0 [pid 7802] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7801] <... futex resumed>) = 0 [pid 7802] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7801] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7802] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7801] <... futex resumed>) = 0 [pid 7801] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7802] <... openat resumed>) = 4 [pid 7802] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7801] <... futex resumed>) = 0 [pid 7802] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7801] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7801] <... futex resumed>) = 0 [pid 7802] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7801] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7802] <... openat resumed>) = 5 [pid 7802] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7801] <... futex resumed>) = 0 [pid 7802] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7801] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7802] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7801] <... futex resumed>) = 0 [ 280.234774][ T7802] loop0: detected capacity change from 0 to 4096 [ 280.255632][ T7802] ntfs: volume version 3.1. [pid 7801] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7801] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7801] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7801] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7803 attached [pid 7803] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7801] <... clone3 resumed> => {parent_tid=[2761]}, 88) = 2761 [pid 7803] set_robust_list(0x7feef7aad9a0, 24 [pid 7801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7801] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7803] <... set_robust_list resumed>) = 0 [pid 7801] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7803] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7803] ftruncate(4, 0) = 0 [pid 7803] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7801] <... futex resumed>) = 0 [pid 7803] <... futex resumed>) = 1 [pid 7802] <... write resumed>) = 1048064 [pid 7802] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7803] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7802] <... futex resumed>) = 0 [pid 7802] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7801] close(3) = 0 [pid 7801] close(4) = 0 [pid 7801] close(5) = 0 [pid 7801] close(6) = -1 EBADF (Bad file descriptor) [pid 7801] close(7) = -1 EBADF (Bad file descriptor) [pid 7801] close(8) = -1 EBADF (Bad file descriptor) [pid 7801] close(9) = -1 EBADF (Bad file descriptor) [pid 7801] close(10) = -1 EBADF (Bad file descriptor) [pid 7801] close(11) = -1 EBADF (Bad file descriptor) [pid 7801] close(12) = -1 EBADF (Bad file descriptor) [pid 7801] close(13) = -1 EBADF (Bad file descriptor) [pid 7801] close(14) = -1 EBADF (Bad file descriptor) [pid 7801] close(15) = -1 EBADF (Bad file descriptor) [pid 7801] close(16) = -1 EBADF (Bad file descriptor) [pid 7801] close(17) = -1 EBADF (Bad file descriptor) [pid 7801] close(18) = -1 EBADF (Bad file descriptor) [pid 7801] close(19) = -1 EBADF (Bad file descriptor) [pid 7801] close(20) = -1 EBADF (Bad file descriptor) [pid 7801] close(21) = -1 EBADF (Bad file descriptor) [pid 7801] close(22) = -1 EBADF (Bad file descriptor) [pid 7801] close(23) = -1 EBADF (Bad file descriptor) [pid 7801] close(24) = -1 EBADF (Bad file descriptor) [pid 7801] close(25) = -1 EBADF (Bad file descriptor) [pid 7801] close(26) = -1 EBADF (Bad file descriptor) [pid 7801] close(27) = -1 EBADF (Bad file descriptor) [pid 7801] close(28) = -1 EBADF (Bad file descriptor) [pid 7801] close(29) = -1 EBADF (Bad file descriptor) [pid 7801] exit_group(0 [pid 7802] <... futex resumed>) = ? [pid 7802] +++ exited with 0 +++ [pid 7803] <... futex resumed>) = ? [pid 7801] <... exit_group resumed>) = ? [pid 7803] +++ exited with 0 +++ [pid 7801] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2759, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./926", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./926", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./926/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./926/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./926/cgroup.cpu") = 0 [pid 5028] umount2("./926/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./926/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./926/binderfs") = 0 [pid 5028] umount2("./926/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./926/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./926/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./926/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./926/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./926/file0") = 0 [pid 5028] umount2("./926/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./926/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./926/cgroup") = 0 [pid 5028] umount2("./926/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./926/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./926/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./926") = 0 [pid 5028] mkdir("./927", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7804 attached , child_tidptr=0x5555563a5690) = 2762 [pid 7804] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7804] chdir("./927") = 0 [pid 7804] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7804] setpgid(0, 0) = 0 [pid 7804] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7804] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7804] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7804] write(3, "1000", 4) = 4 [pid 7804] close(3) = 0 [pid 7804] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7804] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7804] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7804] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7804] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7804] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7804] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7805 attached => {parent_tid=[2763]}, 88) = 2763 [pid 7805] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7804] rt_sigprocmask(SIG_SETMASK, [], [pid 7805] <... rseq resumed>) = 0 [pid 7804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7805] set_robust_list(0x7feeffcce9a0, 24 [pid 7804] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7805] <... set_robust_list resumed>) = 0 [pid 7804] <... futex resumed>) = 0 [pid 7805] rt_sigprocmask(SIG_SETMASK, [], [pid 7804] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7805] memfd_create("syzkaller", 0) = 3 [pid 7805] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7805] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7805] munmap(0x7feef78ae000, 2097152) = 0 [pid 7805] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7805] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7805] close(3) = 0 [pid 7805] mkdir("./file0", 0777) = 0 [pid 7805] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7805] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7805] chdir("./file0") = 0 [pid 7805] ioctl(4, LOOP_CLR_FD) = 0 [pid 7805] close(4) = 0 [pid 7805] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7804] <... futex resumed>) = 0 [pid 7805] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7804] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7805] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7804] <... futex resumed>) = 0 [pid 7805] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7804] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7805] <... openat resumed>) = 4 [pid 7805] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7804] <... futex resumed>) = 0 [pid 7805] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7804] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7805] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7804] <... futex resumed>) = 0 [pid 7805] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7804] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7805] <... openat resumed>) = 5 [pid 7805] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7804] <... futex resumed>) = 0 [pid 7805] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7804] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 280.473225][ T7805] loop0: detected capacity change from 0 to 4096 [ 280.494239][ T7805] ntfs: volume version 3.1. [pid 7804] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7804] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7804] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7804] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7804] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7806 attached [pid 7806] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7806] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7804] <... clone3 resumed> => {parent_tid=[2764]}, 88) = 2764 [pid 7806] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7804] rt_sigprocmask(SIG_SETMASK, [], [pid 7806] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7804] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7806] <... futex resumed>) = 0 [pid 7804] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7806] ftruncate(4, 0) = 0 [pid 7805] <... write resumed>) = 1048064 [pid 7806] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7805] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7806] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7805] <... futex resumed>) = 0 [pid 7805] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7804] <... futex resumed>) = 0 [pid 7804] close(3) = 0 [pid 7804] close(4) = 0 [pid 7804] close(5) = 0 [pid 7804] close(6) = -1 EBADF (Bad file descriptor) [pid 7804] close(7) = -1 EBADF (Bad file descriptor) [pid 7804] close(8) = -1 EBADF (Bad file descriptor) [pid 7804] close(9) = -1 EBADF (Bad file descriptor) [pid 7804] close(10) = -1 EBADF (Bad file descriptor) [pid 7804] close(11) = -1 EBADF (Bad file descriptor) [pid 7804] close(12) = -1 EBADF (Bad file descriptor) [pid 7804] close(13) = -1 EBADF (Bad file descriptor) [pid 7804] close(14) = -1 EBADF (Bad file descriptor) [pid 7804] close(15) = -1 EBADF (Bad file descriptor) [pid 7804] close(16) = -1 EBADF (Bad file descriptor) [pid 7804] close(17) = -1 EBADF (Bad file descriptor) [pid 7804] close(18) = -1 EBADF (Bad file descriptor) [pid 7804] close(19) = -1 EBADF (Bad file descriptor) [pid 7804] close(20) = -1 EBADF (Bad file descriptor) [pid 7804] close(21) = -1 EBADF (Bad file descriptor) [pid 7804] close(22) = -1 EBADF (Bad file descriptor) [pid 7804] close(23) = -1 EBADF (Bad file descriptor) [pid 7804] close(24) = -1 EBADF (Bad file descriptor) [pid 7804] close(25) = -1 EBADF (Bad file descriptor) [pid 7804] close(26) = -1 EBADF (Bad file descriptor) [pid 7804] close(27) = -1 EBADF (Bad file descriptor) [pid 7804] close(28) = -1 EBADF (Bad file descriptor) [pid 7804] close(29) = -1 EBADF (Bad file descriptor) [pid 7804] exit_group(0) = ? [pid 7805] <... futex resumed>) = ? [pid 7806] <... futex resumed>) = ? [pid 7805] +++ exited with 0 +++ [pid 7806] +++ exited with 0 +++ [pid 7804] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2762, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./927", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./927", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./927/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./927/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./927/cgroup.cpu") = 0 [pid 5028] umount2("./927/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./927/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./927/binderfs") = 0 [pid 5028] umount2("./927/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./927/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./927/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./927/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./927/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./927/file0") = 0 [pid 5028] umount2("./927/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./927/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./927/cgroup") = 0 [pid 5028] umount2("./927/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./927/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./927/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./927") = 0 [pid 5028] mkdir("./928", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2765 ./strace-static-x86_64: Process 7807 attached [pid 7807] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7807] chdir("./928") = 0 [pid 7807] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7807] setpgid(0, 0) = 0 [pid 7807] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7807] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7807] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7807] write(3, "1000", 4) = 4 [pid 7807] close(3) = 0 [pid 7807] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7807] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7807] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7807] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7807] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7807] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7807] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7808 attached => {parent_tid=[2766]}, 88) = 2766 [pid 7808] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7807] rt_sigprocmask(SIG_SETMASK, [], [pid 7808] <... rseq resumed>) = 0 [pid 7807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7807] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7807] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7808] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7808] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7808] memfd_create("syzkaller", 0) = 3 [pid 7808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7808] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7808] munmap(0x7feef78ae000, 2097152) = 0 [pid 7808] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7808] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7808] close(3) = 0 [pid 7808] mkdir("./file0", 0777) = 0 [pid 7808] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7808] chdir("./file0") = 0 [pid 7808] ioctl(4, LOOP_CLR_FD) = 0 [pid 7808] close(4) = 0 [pid 7808] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7807] <... futex resumed>) = 0 [pid 7807] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7807] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7808] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7808] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7807] <... futex resumed>) = 0 [pid 7808] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7807] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7807] <... futex resumed>) = 0 [pid 7808] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7807] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7808] <... openat resumed>) = 5 [pid 7808] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7807] <... futex resumed>) = 0 [pid 7808] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7807] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7807] <... futex resumed>) = 0 [pid 7807] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 280.701321][ T7808] loop0: detected capacity change from 0 to 4096 [ 280.723217][ T7808] ntfs: volume version 3.1. [pid 7808] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7807] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7807] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7807] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7807] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7807] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7809 attached [pid 7809] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7807] <... clone3 resumed> => {parent_tid=[2767]}, 88) = 2767 [pid 7809] <... rseq resumed>) = 0 [pid 7807] rt_sigprocmask(SIG_SETMASK, [], [pid 7809] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7809] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7809] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7807] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7807] <... futex resumed>) = 0 [pid 7809] ftruncate(4, 0 [pid 7807] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7809] <... ftruncate resumed>) = 0 [pid 7809] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7808] <... write resumed>) = 1048064 [pid 7809] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7808] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7807] <... futex resumed>) = 0 [pid 7808] <... futex resumed>) = 0 [pid 7807] close(3 [pid 7808] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7807] <... close resumed>) = 0 [pid 7807] close(4) = 0 [pid 7807] close(5) = 0 [pid 7807] close(6) = -1 EBADF (Bad file descriptor) [pid 7807] close(7) = -1 EBADF (Bad file descriptor) [pid 7807] close(8) = -1 EBADF (Bad file descriptor) [pid 7807] close(9) = -1 EBADF (Bad file descriptor) [pid 7807] close(10) = -1 EBADF (Bad file descriptor) [pid 7807] close(11) = -1 EBADF (Bad file descriptor) [pid 7807] close(12) = -1 EBADF (Bad file descriptor) [pid 7807] close(13) = -1 EBADF (Bad file descriptor) [pid 7807] close(14) = -1 EBADF (Bad file descriptor) [pid 7807] close(15) = -1 EBADF (Bad file descriptor) [pid 7807] close(16) = -1 EBADF (Bad file descriptor) [pid 7807] close(17) = -1 EBADF (Bad file descriptor) [pid 7807] close(18) = -1 EBADF (Bad file descriptor) [pid 7807] close(19) = -1 EBADF (Bad file descriptor) [pid 7807] close(20) = -1 EBADF (Bad file descriptor) [pid 7807] close(21) = -1 EBADF (Bad file descriptor) [pid 7807] close(22) = -1 EBADF (Bad file descriptor) [pid 7807] close(23) = -1 EBADF (Bad file descriptor) [pid 7807] close(24) = -1 EBADF (Bad file descriptor) [pid 7807] close(25) = -1 EBADF (Bad file descriptor) [pid 7807] close(26) = -1 EBADF (Bad file descriptor) [pid 7807] close(27) = -1 EBADF (Bad file descriptor) [pid 7807] close(28) = -1 EBADF (Bad file descriptor) [pid 7807] close(29) = -1 EBADF (Bad file descriptor) [pid 7807] exit_group(0 [pid 7809] <... futex resumed>) = ? [pid 7807] <... exit_group resumed>) = ? [pid 7809] +++ exited with 0 +++ [pid 7808] <... futex resumed>) = ? [pid 7808] +++ exited with 0 +++ [pid 7807] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2765, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./928", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./928", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./928/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./928/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./928/cgroup.cpu") = 0 [pid 5028] umount2("./928/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./928/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./928/binderfs") = 0 [pid 5028] umount2("./928/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./928/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./928/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./928/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./928/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./928/file0") = 0 [pid 5028] umount2("./928/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./928/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./928/cgroup") = 0 [pid 5028] umount2("./928/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./928/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./928/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./928") = 0 [pid 5028] mkdir("./929", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7810 attached [pid 7810] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2768 [pid 7810] <... set_robust_list resumed>) = 0 [pid 7810] chdir("./929") = 0 [pid 7810] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7810] setpgid(0, 0) = 0 [pid 7810] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7810] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7810] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7810] write(3, "1000", 4) = 4 [pid 7810] close(3) = 0 [pid 7810] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7810] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7810] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7810] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7810] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7810] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7810] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7811 attached [pid 7811] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7810] <... clone3 resumed> => {parent_tid=[2769]}, 88) = 2769 [pid 7810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7810] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7810] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7811] <... rseq resumed>) = 0 [pid 7811] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7811] memfd_create("syzkaller", 0) = 3 [pid 7811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7811] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7811] munmap(0x7feef78ae000, 2097152) = 0 [pid 7811] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7811] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7811] close(3) = 0 [pid 7811] mkdir("./file0", 0777) = 0 [pid 7811] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7811] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7811] chdir("./file0") = 0 [pid 7811] ioctl(4, LOOP_CLR_FD) = 0 [pid 7811] close(4) = 0 [pid 7811] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7811] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7810] <... futex resumed>) = 0 [pid 7810] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7811] <... futex resumed>) = 0 [pid 7810] <... futex resumed>) = 1 [pid 7811] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7810] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7811] <... openat resumed>) = 4 [pid 7811] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7810] <... futex resumed>) = 0 [pid 7811] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7810] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7810] <... futex resumed>) = 0 [pid 7810] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7811] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7811] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7810] <... futex resumed>) = 0 [pid 7811] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7810] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7811] <... futex resumed>) = 0 [pid 7810] <... futex resumed>) = 1 [pid 7810] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 280.907227][ T7811] loop0: detected capacity change from 0 to 4096 [ 280.928598][ T7811] ntfs: volume version 3.1. [pid 7811] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7810] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7810] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7810] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7810] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7810] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2770]}, 88) = 2770 [pid 7810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7812 attached [pid 7812] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7812] set_robust_list(0x7feef7aad9a0, 24 [pid 7810] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7810] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7812] <... set_robust_list resumed>) = 0 [pid 7812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7812] ftruncate(4, 0) = 0 [pid 7811] <... write resumed>) = 1048064 [pid 7812] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7811] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7812] <... futex resumed>) = 1 [pid 7812] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7811] <... futex resumed>) = 0 [pid 7811] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7810] <... futex resumed>) = 0 [pid 7810] close(3) = 0 [pid 7810] close(4) = 0 [pid 7810] close(5) = 0 [pid 7810] close(6) = -1 EBADF (Bad file descriptor) [pid 7810] close(7) = -1 EBADF (Bad file descriptor) [pid 7810] close(8) = -1 EBADF (Bad file descriptor) [pid 7810] close(9) = -1 EBADF (Bad file descriptor) [pid 7810] close(10) = -1 EBADF (Bad file descriptor) [pid 7810] close(11) = -1 EBADF (Bad file descriptor) [pid 7810] close(12) = -1 EBADF (Bad file descriptor) [pid 7810] close(13) = -1 EBADF (Bad file descriptor) [pid 7810] close(14) = -1 EBADF (Bad file descriptor) [pid 7810] close(15) = -1 EBADF (Bad file descriptor) [pid 7810] close(16) = -1 EBADF (Bad file descriptor) [pid 7810] close(17) = -1 EBADF (Bad file descriptor) [pid 7810] close(18) = -1 EBADF (Bad file descriptor) [pid 7810] close(19) = -1 EBADF (Bad file descriptor) [pid 7810] close(20) = -1 EBADF (Bad file descriptor) [pid 7810] close(21) = -1 EBADF (Bad file descriptor) [pid 7810] close(22) = -1 EBADF (Bad file descriptor) [pid 7810] close(23) = -1 EBADF (Bad file descriptor) [pid 7810] close(24) = -1 EBADF (Bad file descriptor) [pid 7810] close(25) = -1 EBADF (Bad file descriptor) [pid 7810] close(26) = -1 EBADF (Bad file descriptor) [pid 7810] close(27) = -1 EBADF (Bad file descriptor) [pid 7810] close(28) = -1 EBADF (Bad file descriptor) [pid 7810] close(29) = -1 EBADF (Bad file descriptor) [pid 7810] exit_group(0) = ? [pid 7811] <... futex resumed>) = ? [pid 7812] <... futex resumed>) = ? [pid 7811] +++ exited with 0 +++ [pid 7812] +++ exited with 0 +++ [pid 7810] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2768, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./929", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./929", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./929/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./929/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./929/cgroup.cpu") = 0 [pid 5028] umount2("./929/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./929/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./929/binderfs") = 0 [pid 5028] umount2("./929/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./929/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./929/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./929/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./929/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./929/file0") = 0 [pid 5028] umount2("./929/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./929/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./929/cgroup") = 0 [pid 5028] umount2("./929/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./929/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./929/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./929") = 0 [pid 5028] mkdir("./930", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2771 ./strace-static-x86_64: Process 7813 attached [pid 7813] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7813] chdir("./930") = 0 [pid 7813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7813] setpgid(0, 0) = 0 [pid 7813] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7813] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7813] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7813] write(3, "1000", 4) = 4 [pid 7813] close(3) = 0 [pid 7813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7813] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7813] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7813] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7813] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7814 attached => {parent_tid=[2772]}, 88) = 2772 [pid 7814] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7813] rt_sigprocmask(SIG_SETMASK, [], [pid 7814] <... rseq resumed>) = 0 [pid 7813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7814] set_robust_list(0x7feeffcce9a0, 24 [pid 7813] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7814] <... set_robust_list resumed>) = 0 [pid 7813] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7814] memfd_create("syzkaller", 0) = 3 [pid 7814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7814] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7814] munmap(0x7feef78ae000, 2097152) = 0 [pid 7814] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7814] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7814] close(3) = 0 [pid 7814] mkdir("./file0", 0777) = 0 [pid 7814] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7814] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7814] chdir("./file0") = 0 [pid 7814] ioctl(4, LOOP_CLR_FD) = 0 [pid 7814] close(4) = 0 [pid 7814] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7813] <... futex resumed>) = 0 [pid 7814] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7813] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7814] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7813] <... futex resumed>) = 0 [pid 7813] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7814] <... openat resumed>) = 4 [pid 7814] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7813] <... futex resumed>) = 0 [pid 7814] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7813] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7813] <... futex resumed>) = 0 [pid 7814] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7813] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7814] <... openat resumed>) = 5 [pid 7814] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7813] <... futex resumed>) = 0 [pid 7813] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7814] <... futex resumed>) = 1 [ 281.154917][ T7814] loop0: detected capacity change from 0 to 4096 [ 281.176695][ T7814] ntfs: volume version 3.1. [pid 7814] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7813] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7813] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7813] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7815 attached => {parent_tid=[2773]}, 88) = 2773 [pid 7815] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7813] rt_sigprocmask(SIG_SETMASK, [], [pid 7815] <... rseq resumed>) = 0 [pid 7813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7815] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7813] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7815] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7813] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7815] ftruncate(4, 0) = 0 [pid 7815] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7814] <... write resumed>) = 1048064 [pid 7813] <... futex resumed>) = 0 [pid 7815] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7814] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7813] close(3 [pid 7814] <... futex resumed>) = 0 [pid 7813] <... close resumed>) = 0 [pid 7814] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7813] close(4) = 0 [pid 7813] close(5) = 0 [pid 7813] close(6) = -1 EBADF (Bad file descriptor) [pid 7813] close(7) = -1 EBADF (Bad file descriptor) [pid 7813] close(8) = -1 EBADF (Bad file descriptor) [pid 7813] close(9) = -1 EBADF (Bad file descriptor) [pid 7813] close(10) = -1 EBADF (Bad file descriptor) [pid 7813] close(11) = -1 EBADF (Bad file descriptor) [pid 7813] close(12) = -1 EBADF (Bad file descriptor) [pid 7813] close(13) = -1 EBADF (Bad file descriptor) [pid 7813] close(14) = -1 EBADF (Bad file descriptor) [pid 7813] close(15) = -1 EBADF (Bad file descriptor) [pid 7813] close(16) = -1 EBADF (Bad file descriptor) [pid 7813] close(17) = -1 EBADF (Bad file descriptor) [pid 7813] close(18) = -1 EBADF (Bad file descriptor) [pid 7813] close(19) = -1 EBADF (Bad file descriptor) [pid 7813] close(20) = -1 EBADF (Bad file descriptor) [pid 7813] close(21) = -1 EBADF (Bad file descriptor) [pid 7813] close(22) = -1 EBADF (Bad file descriptor) [pid 7813] close(23) = -1 EBADF (Bad file descriptor) [pid 7813] close(24) = -1 EBADF (Bad file descriptor) [pid 7813] close(25) = -1 EBADF (Bad file descriptor) [pid 7813] close(26) = -1 EBADF (Bad file descriptor) [pid 7813] close(27) = -1 EBADF (Bad file descriptor) [pid 7813] close(28) = -1 EBADF (Bad file descriptor) [pid 7813] close(29) = -1 EBADF (Bad file descriptor) [pid 7813] exit_group(0) = ? [pid 7815] <... futex resumed>) = ? [pid 7814] <... futex resumed>) = ? [pid 7815] +++ exited with 0 +++ [pid 7814] +++ exited with 0 +++ [pid 7813] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2771, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./930", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./930", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./930/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./930/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./930/cgroup.cpu") = 0 [pid 5028] umount2("./930/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./930/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./930/binderfs") = 0 [pid 5028] umount2("./930/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./930/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./930/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./930/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./930/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./930/file0") = 0 [pid 5028] umount2("./930/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./930/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./930/cgroup") = 0 [pid 5028] umount2("./930/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./930/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./930/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./930") = 0 [pid 5028] mkdir("./931", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7816 attached , child_tidptr=0x5555563a5690) = 2774 [pid 7816] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7816] chdir("./931") = 0 [pid 7816] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7816] setpgid(0, 0) = 0 [pid 7816] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7816] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7816] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7816] write(3, "1000", 4) = 4 [pid 7816] close(3) = 0 [pid 7816] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7816] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7816] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7816] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7816] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7816] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7817 attached [pid 7817] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7816] <... clone3 resumed> => {parent_tid=[2775]}, 88) = 2775 [pid 7817] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7816] rt_sigprocmask(SIG_SETMASK, [], [pid 7817] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7817] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7816] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7816] <... futex resumed>) = 0 [pid 7817] memfd_create("syzkaller", 0 [pid 7816] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7817] <... memfd_create resumed>) = 3 [pid 7817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7817] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7817] munmap(0x7feef78ae000, 2097152) = 0 [pid 7817] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7817] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7817] close(3) = 0 [pid 7817] mkdir("./file0", 0777) = 0 [pid 7817] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7817] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7817] chdir("./file0") = 0 [pid 7817] ioctl(4, LOOP_CLR_FD) = 0 [pid 7817] close(4) = 0 [pid 7817] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7816] <... futex resumed>) = 0 [pid 7816] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7817] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7816] <... futex resumed>) = 0 [pid 7816] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7817] <... openat resumed>) = 4 [pid 7817] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] <... futex resumed>) = 0 [pid 7816] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7816] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7817] <... futex resumed>) = 1 [pid 7817] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7817] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7816] <... futex resumed>) = 0 [pid 7816] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7817] <... futex resumed>) = 1 [pid 7816] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 281.372509][ T7817] loop0: detected capacity change from 0 to 4096 [ 281.394760][ T7817] ntfs: volume version 3.1. [pid 7817] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7816] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7816] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7816] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7816] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7816] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7818 attached [pid 7818] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7816] <... clone3 resumed> => {parent_tid=[2776]}, 88) = 2776 [pid 7818] <... rseq resumed>) = 0 [pid 7818] set_robust_list(0x7feef7aad9a0, 24 [pid 7816] rt_sigprocmask(SIG_SETMASK, [], [pid 7818] <... set_robust_list resumed>) = 0 [pid 7816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7818] rt_sigprocmask(SIG_SETMASK, [], [pid 7816] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7818] ftruncate(4, 0 [pid 7816] <... futex resumed>) = 0 [pid 7816] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7818] <... ftruncate resumed>) = 0 [pid 7817] <... write resumed>) = 1048064 [pid 7817] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7818] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7817] <... futex resumed>) = 0 [pid 7818] <... futex resumed>) = 1 [pid 7817] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7818] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7816] <... futex resumed>) = 0 [pid 7816] close(3) = 0 [pid 7816] close(4) = 0 [pid 7816] close(5) = 0 [pid 7816] close(6) = -1 EBADF (Bad file descriptor) [pid 7816] close(7) = -1 EBADF (Bad file descriptor) [pid 7816] close(8) = -1 EBADF (Bad file descriptor) [pid 7816] close(9) = -1 EBADF (Bad file descriptor) [pid 7816] close(10) = -1 EBADF (Bad file descriptor) [pid 7816] close(11) = -1 EBADF (Bad file descriptor) [pid 7816] close(12) = -1 EBADF (Bad file descriptor) [pid 7816] close(13) = -1 EBADF (Bad file descriptor) [pid 7816] close(14) = -1 EBADF (Bad file descriptor) [pid 7816] close(15) = -1 EBADF (Bad file descriptor) [pid 7816] close(16) = -1 EBADF (Bad file descriptor) [pid 7816] close(17) = -1 EBADF (Bad file descriptor) [pid 7816] close(18) = -1 EBADF (Bad file descriptor) [pid 7816] close(19) = -1 EBADF (Bad file descriptor) [pid 7816] close(20) = -1 EBADF (Bad file descriptor) [pid 7816] close(21) = -1 EBADF (Bad file descriptor) [pid 7816] close(22) = -1 EBADF (Bad file descriptor) [pid 7816] close(23) = -1 EBADF (Bad file descriptor) [pid 7816] close(24) = -1 EBADF (Bad file descriptor) [pid 7816] close(25) = -1 EBADF (Bad file descriptor) [pid 7816] close(26) = -1 EBADF (Bad file descriptor) [pid 7816] close(27) = -1 EBADF (Bad file descriptor) [pid 7816] close(28) = -1 EBADF (Bad file descriptor) [pid 7816] close(29) = -1 EBADF (Bad file descriptor) [pid 7816] exit_group(0) = ? [pid 7817] <... futex resumed>) = ? [pid 7818] <... futex resumed>) = ? [pid 7817] +++ exited with 0 +++ [pid 7818] +++ exited with 0 +++ [pid 7816] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2774, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./931", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./931", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./931/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./931/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./931/cgroup.cpu") = 0 [pid 5028] umount2("./931/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./931/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./931/binderfs") = 0 [pid 5028] umount2("./931/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./931/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./931/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./931/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./931/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./931/file0") = 0 [pid 5028] umount2("./931/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./931/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./931/cgroup") = 0 [pid 5028] umount2("./931/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./931/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./931/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./931") = 0 [pid 5028] mkdir("./932", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2777 ./strace-static-x86_64: Process 7819 attached [pid 7819] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7819] chdir("./932") = 0 [pid 7819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7819] setpgid(0, 0) = 0 [pid 7819] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7819] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7819] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7819] write(3, "1000", 4) = 4 [pid 7819] close(3) = 0 [pid 7819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7819] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7819] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7819] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7820 attached [pid 7820] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7819] <... clone3 resumed> => {parent_tid=[2778]}, 88) = 2778 [pid 7820] <... rseq resumed>) = 0 [pid 7819] rt_sigprocmask(SIG_SETMASK, [], [pid 7820] set_robust_list(0x7feeffcce9a0, 24 [pid 7819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7820] <... set_robust_list resumed>) = 0 [pid 7819] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7820] rt_sigprocmask(SIG_SETMASK, [], [pid 7819] <... futex resumed>) = 0 [pid 7820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7819] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7820] memfd_create("syzkaller", 0) = 3 [pid 7820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7820] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7820] munmap(0x7feef78ae000, 2097152) = 0 [pid 7820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7820] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7820] close(3) = 0 [pid 7820] mkdir("./file0", 0777) = 0 [pid 7820] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7820] chdir("./file0") = 0 [pid 7820] ioctl(4, LOOP_CLR_FD) = 0 [pid 7820] close(4) = 0 [pid 7820] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7819] <... futex resumed>) = 0 [pid 7820] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7819] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7819] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7820] <... openat resumed>) = 4 [pid 7820] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7819] <... futex resumed>) = 0 [pid 7820] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7819] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7819] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7820] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7820] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7819] <... futex resumed>) = 0 [pid 7819] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7819] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 281.608561][ T7820] loop0: detected capacity change from 0 to 4096 [ 281.630371][ T7820] ntfs: volume version 3.1. [pid 7820] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7819] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7819] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7821 attached [pid 7821] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7819] <... clone3 resumed> => {parent_tid=[2779]}, 88) = 2779 [pid 7821] set_robust_list(0x7feef7aad9a0, 24 [pid 7819] rt_sigprocmask(SIG_SETMASK, [], [pid 7821] <... set_robust_list resumed>) = 0 [pid 7819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7821] rt_sigprocmask(SIG_SETMASK, [], [pid 7819] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7819] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7821] ftruncate(4, 0) = 0 [pid 7821] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7821] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7819] <... futex resumed>) = 0 [pid 7820] <... write resumed>) = 1048064 [pid 7820] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7820] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7819] close(3) = 0 [pid 7819] close(4) = 0 [pid 7819] close(5) = 0 [pid 7819] close(6) = -1 EBADF (Bad file descriptor) [pid 7819] close(7) = -1 EBADF (Bad file descriptor) [pid 7819] close(8) = -1 EBADF (Bad file descriptor) [pid 7819] close(9) = -1 EBADF (Bad file descriptor) [pid 7819] close(10) = -1 EBADF (Bad file descriptor) [pid 7819] close(11) = -1 EBADF (Bad file descriptor) [pid 7819] close(12) = -1 EBADF (Bad file descriptor) [pid 7819] close(13) = -1 EBADF (Bad file descriptor) [pid 7819] close(14) = -1 EBADF (Bad file descriptor) [pid 7819] close(15) = -1 EBADF (Bad file descriptor) [pid 7819] close(16) = -1 EBADF (Bad file descriptor) [pid 7819] close(17) = -1 EBADF (Bad file descriptor) [pid 7819] close(18) = -1 EBADF (Bad file descriptor) [pid 7819] close(19) = -1 EBADF (Bad file descriptor) [pid 7819] close(20) = -1 EBADF (Bad file descriptor) [pid 7819] close(21) = -1 EBADF (Bad file descriptor) [pid 7819] close(22) = -1 EBADF (Bad file descriptor) [pid 7819] close(23) = -1 EBADF (Bad file descriptor) [pid 7819] close(24) = -1 EBADF (Bad file descriptor) [pid 7819] close(25) = -1 EBADF (Bad file descriptor) [pid 7819] close(26) = -1 EBADF (Bad file descriptor) [pid 7819] close(27) = -1 EBADF (Bad file descriptor) [pid 7819] close(28) = -1 EBADF (Bad file descriptor) [pid 7819] close(29) = -1 EBADF (Bad file descriptor) [pid 7819] exit_group(0 [pid 7821] <... futex resumed>) = ? [pid 7821] +++ exited with 0 +++ [pid 7819] <... exit_group resumed>) = ? [pid 7820] <... futex resumed>) = ? [pid 7820] +++ exited with 0 +++ [pid 7819] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2777, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./932", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./932", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./932/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./932/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./932/cgroup.cpu") = 0 [pid 5028] umount2("./932/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./932/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./932/binderfs") = 0 [pid 5028] umount2("./932/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./932/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./932/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./932/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./932/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./932/file0") = 0 [pid 5028] umount2("./932/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./932/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./932/cgroup") = 0 [pid 5028] umount2("./932/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./932/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./932/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./932") = 0 [pid 5028] mkdir("./933", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2780 ./strace-static-x86_64: Process 7822 attached [pid 7822] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7822] chdir("./933") = 0 [pid 7822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7822] setpgid(0, 0) = 0 [pid 7822] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7822] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7822] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7822] write(3, "1000", 4) = 4 [pid 7822] close(3) = 0 [pid 7822] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7822] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7822] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7822] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7823 attached [pid 7823] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7823] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7822] <... clone3 resumed> => {parent_tid=[2781]}, 88) = 2781 [pid 7822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7822] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7822] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7823] memfd_create("syzkaller", 0) = 3 [pid 7823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7823] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7823] munmap(0x7feef78ae000, 2097152) = 0 [pid 7823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7823] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7823] close(3) = 0 [pid 7823] mkdir("./file0", 0777) = 0 [pid 7823] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7823] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7823] chdir("./file0") = 0 [pid 7823] ioctl(4, LOOP_CLR_FD) = 0 [pid 7823] close(4) = 0 [pid 7823] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7823] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7822] <... futex resumed>) = 0 [pid 7822] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7822] <... futex resumed>) = 0 [pid 7822] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7823] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7823] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7822] <... futex resumed>) = 0 [pid 7823] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7822] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7822] <... futex resumed>) = 0 [pid 7823] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7822] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7823] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7822] <... futex resumed>) = 0 [pid 7822] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7822] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 281.838912][ T7823] loop0: detected capacity change from 0 to 4096 [ 281.858670][ T7823] ntfs: volume version 3.1. [pid 7823] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7822] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7822] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7822] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7824 attached => {parent_tid=[2782]}, 88) = 2782 [pid 7824] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7822] rt_sigprocmask(SIG_SETMASK, [], [pid 7824] <... rseq resumed>) = 0 [pid 7822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7824] set_robust_list(0x7feef7aad9a0, 24 [pid 7822] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7824] <... set_robust_list resumed>) = 0 [pid 7822] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7824] ftruncate(4, 0) = 0 [pid 7823] <... write resumed>) = 1048064 [pid 7823] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7824] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7823] <... futex resumed>) = 0 [pid 7823] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7824] <... futex resumed>) = 1 [pid 7822] <... futex resumed>) = 0 [pid 7824] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7822] close(3) = 0 [pid 7822] close(4) = 0 [pid 7822] close(5) = 0 [pid 7822] close(6) = -1 EBADF (Bad file descriptor) [pid 7822] close(7) = -1 EBADF (Bad file descriptor) [pid 7822] close(8) = -1 EBADF (Bad file descriptor) [pid 7822] close(9) = -1 EBADF (Bad file descriptor) [pid 7822] close(10) = -1 EBADF (Bad file descriptor) [pid 7822] close(11) = -1 EBADF (Bad file descriptor) [pid 7822] close(12) = -1 EBADF (Bad file descriptor) [pid 7822] close(13) = -1 EBADF (Bad file descriptor) [pid 7822] close(14) = -1 EBADF (Bad file descriptor) [pid 7822] close(15) = -1 EBADF (Bad file descriptor) [pid 7822] close(16) = -1 EBADF (Bad file descriptor) [pid 7822] close(17) = -1 EBADF (Bad file descriptor) [pid 7822] close(18) = -1 EBADF (Bad file descriptor) [pid 7822] close(19) = -1 EBADF (Bad file descriptor) [pid 7822] close(20) = -1 EBADF (Bad file descriptor) [pid 7822] close(21) = -1 EBADF (Bad file descriptor) [pid 7822] close(22) = -1 EBADF (Bad file descriptor) [pid 7822] close(23) = -1 EBADF (Bad file descriptor) [pid 7822] close(24) = -1 EBADF (Bad file descriptor) [pid 7822] close(25) = -1 EBADF (Bad file descriptor) [pid 7822] close(26) = -1 EBADF (Bad file descriptor) [pid 7822] close(27) = -1 EBADF (Bad file descriptor) [pid 7822] close(28) = -1 EBADF (Bad file descriptor) [pid 7822] close(29) = -1 EBADF (Bad file descriptor) [pid 7822] exit_group(0 [pid 7824] <... futex resumed>) = ? [pid 7823] <... futex resumed>) = ? [pid 7822] <... exit_group resumed>) = ? [pid 7824] +++ exited with 0 +++ [pid 7823] +++ exited with 0 +++ [pid 7822] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2780, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./933", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./933", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./933/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./933/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./933/cgroup.cpu") = 0 [pid 5028] umount2("./933/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./933/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./933/binderfs") = 0 [pid 5028] umount2("./933/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./933/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./933/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./933/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./933/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./933/file0") = 0 [pid 5028] umount2("./933/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./933/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./933/cgroup") = 0 [pid 5028] umount2("./933/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./933/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./933/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./933") = 0 [pid 5028] mkdir("./934", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2783 ./strace-static-x86_64: Process 7825 attached [pid 7825] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7825] chdir("./934") = 0 [pid 7825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7825] setpgid(0, 0) = 0 [pid 7825] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7825] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7825] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7825] write(3, "1000", 4) = 4 [pid 7825] close(3) = 0 [pid 7825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7825] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7825] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7825] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7825] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7826 attached [pid 7826] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7825] <... clone3 resumed> => {parent_tid=[2784]}, 88) = 2784 [pid 7825] rt_sigprocmask(SIG_SETMASK, [], [pid 7826] <... rseq resumed>) = 0 [pid 7826] set_robust_list(0x7feeffcce9a0, 24 [pid 7825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7825] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] <... set_robust_list resumed>) = 0 [pid 7826] rt_sigprocmask(SIG_SETMASK, [], [pid 7825] <... futex resumed>) = 0 [pid 7826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7825] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7826] memfd_create("syzkaller", 0) = 3 [pid 7826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7826] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7826] munmap(0x7feef78ae000, 2097152) = 0 [pid 7826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7826] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7826] close(3) = 0 [pid 7826] mkdir("./file0", 0777) = 0 [pid 7826] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7826] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7826] chdir("./file0") = 0 [pid 7826] ioctl(4, LOOP_CLR_FD) = 0 [pid 7826] close(4) = 0 [pid 7826] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7826] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7825] <... futex resumed>) = 0 [pid 7825] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7826] <... futex resumed>) = 0 [pid 7826] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7825] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7826] <... openat resumed>) = 4 [pid 7826] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7825] <... futex resumed>) = 0 [pid 7826] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7825] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7825] <... futex resumed>) = 0 [pid 7826] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7825] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7826] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7826] <... futex resumed>) = 0 [pid 7825] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7826] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7825] <... futex resumed>) = 0 [ 282.079370][ T7826] loop0: detected capacity change from 0 to 4096 [ 282.099965][ T7826] ntfs: volume version 3.1. [pid 7825] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7825] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7825] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7825] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7825] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2785]}, 88) = 2785 [pid 7825] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7825] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7825] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7827 attached [pid 7827] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7827] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7827] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7827] ftruncate(4, 0) = 0 [pid 7827] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7826] <... write resumed>) = 1048064 [pid 7825] <... futex resumed>) = 0 [pid 7827] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7826] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7825] close(3 [pid 7826] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7825] <... close resumed>) = 0 [pid 7825] close(4) = 0 [pid 7825] close(5) = 0 [pid 7825] close(6) = -1 EBADF (Bad file descriptor) [pid 7825] close(7) = -1 EBADF (Bad file descriptor) [pid 7825] close(8) = -1 EBADF (Bad file descriptor) [pid 7825] close(9) = -1 EBADF (Bad file descriptor) [pid 7825] close(10) = -1 EBADF (Bad file descriptor) [pid 7825] close(11) = -1 EBADF (Bad file descriptor) [pid 7825] close(12) = -1 EBADF (Bad file descriptor) [pid 7825] close(13) = -1 EBADF (Bad file descriptor) [pid 7825] close(14) = -1 EBADF (Bad file descriptor) [pid 7825] close(15) = -1 EBADF (Bad file descriptor) [pid 7825] close(16) = -1 EBADF (Bad file descriptor) [pid 7825] close(17) = -1 EBADF (Bad file descriptor) [pid 7825] close(18) = -1 EBADF (Bad file descriptor) [pid 7825] close(19) = -1 EBADF (Bad file descriptor) [pid 7825] close(20) = -1 EBADF (Bad file descriptor) [pid 7825] close(21) = -1 EBADF (Bad file descriptor) [pid 7825] close(22) = -1 EBADF (Bad file descriptor) [pid 7825] close(23) = -1 EBADF (Bad file descriptor) [pid 7825] close(24) = -1 EBADF (Bad file descriptor) [pid 7825] close(25) = -1 EBADF (Bad file descriptor) [pid 7825] close(26) = -1 EBADF (Bad file descriptor) [pid 7825] close(27) = -1 EBADF (Bad file descriptor) [pid 7825] close(28) = -1 EBADF (Bad file descriptor) [pid 7825] close(29) = -1 EBADF (Bad file descriptor) [pid 7825] exit_group(0) = ? [pid 7827] <... futex resumed>) = ? [pid 7826] <... futex resumed>) = ? [pid 7826] +++ exited with 0 +++ [pid 7827] +++ exited with 0 +++ [pid 7825] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2783, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./934", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./934", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./934/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./934/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./934/cgroup.cpu") = 0 [pid 5028] umount2("./934/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./934/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./934/binderfs") = 0 [pid 5028] umount2("./934/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./934/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./934/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./934/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./934/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./934/file0") = 0 [pid 5028] umount2("./934/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./934/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./934/cgroup") = 0 [pid 5028] umount2("./934/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./934/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./934/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./934") = 0 [pid 5028] mkdir("./935", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7828 attached [pid 7828] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7828] chdir("./935") = 0 [pid 7828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7828] setpgid(0, 0) = 0 [pid 7828] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7828] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7828] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2786 [pid 7828] <... symlink resumed>) = 0 [pid 7828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7828] write(3, "1000", 4) = 4 [pid 7828] close(3) = 0 [pid 7828] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7828] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7828] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7828] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7828] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7828] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7828] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7829 attached [pid 7829] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7828] <... clone3 resumed> => {parent_tid=[2787]}, 88) = 2787 [pid 7829] set_robust_list(0x7feeffcce9a0, 24 [pid 7828] rt_sigprocmask(SIG_SETMASK, [], [pid 7829] <... set_robust_list resumed>) = 0 [pid 7828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7829] rt_sigprocmask(SIG_SETMASK, [], [pid 7828] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7829] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7828] <... futex resumed>) = 0 [pid 7829] memfd_create("syzkaller", 0 [pid 7828] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7829] <... memfd_create resumed>) = 3 [pid 7829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7829] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7829] munmap(0x7feef78ae000, 2097152) = 0 [pid 7829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7829] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7829] close(3) = 0 [pid 7829] mkdir("./file0", 0777) = 0 [pid 7829] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7829] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7829] chdir("./file0") = 0 [pid 7829] ioctl(4, LOOP_CLR_FD) = 0 [pid 7829] close(4) = 0 [pid 7829] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7828] <... futex resumed>) = 0 [pid 7828] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7828] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7829] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7829] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7828] <... futex resumed>) = 0 [pid 7829] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7828] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7829] <... futex resumed>) = 0 [pid 7828] <... futex resumed>) = 1 [pid 7829] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7828] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7829] <... openat resumed>) = 5 [pid 7829] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7828] <... futex resumed>) = 0 [pid 7828] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7829] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 282.305823][ T7829] loop0: detected capacity change from 0 to 4096 [ 282.327334][ T7829] ntfs: volume version 3.1. [pid 7828] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7828] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7828] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7828] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7828] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2788]}, 88) = 2788 [pid 7828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7828] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7828] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7829] <... write resumed>) = 1048064 [pid 7829] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7829] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 7830 attached [pid 7830] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7830] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7830] ftruncate(4, 0) = 0 [pid 7830] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7830] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7828] <... futex resumed>) = 0 [pid 7828] close(3) = 0 [pid 7828] close(4) = 0 [pid 7828] close(5) = 0 [pid 7828] close(6) = -1 EBADF (Bad file descriptor) [pid 7828] close(7) = -1 EBADF (Bad file descriptor) [pid 7828] close(8) = -1 EBADF (Bad file descriptor) [pid 7828] close(9) = -1 EBADF (Bad file descriptor) [pid 7828] close(10) = -1 EBADF (Bad file descriptor) [pid 7828] close(11) = -1 EBADF (Bad file descriptor) [pid 7828] close(12) = -1 EBADF (Bad file descriptor) [pid 7828] close(13) = -1 EBADF (Bad file descriptor) [pid 7828] close(14) = -1 EBADF (Bad file descriptor) [pid 7828] close(15) = -1 EBADF (Bad file descriptor) [pid 7828] close(16) = -1 EBADF (Bad file descriptor) [pid 7828] close(17) = -1 EBADF (Bad file descriptor) [pid 7828] close(18) = -1 EBADF (Bad file descriptor) [pid 7828] close(19) = -1 EBADF (Bad file descriptor) [pid 7828] close(20) = -1 EBADF (Bad file descriptor) [pid 7828] close(21) = -1 EBADF (Bad file descriptor) [pid 7828] close(22) = -1 EBADF (Bad file descriptor) [pid 7828] close(23) = -1 EBADF (Bad file descriptor) [pid 7828] close(24) = -1 EBADF (Bad file descriptor) [pid 7828] close(25) = -1 EBADF (Bad file descriptor) [pid 7828] close(26) = -1 EBADF (Bad file descriptor) [pid 7828] close(27) = -1 EBADF (Bad file descriptor) [pid 7828] close(28) = -1 EBADF (Bad file descriptor) [pid 7828] close(29) = -1 EBADF (Bad file descriptor) [pid 7828] exit_group(0) = ? [pid 7829] <... futex resumed>) = ? [pid 7830] <... futex resumed>) = ? [pid 7829] +++ exited with 0 +++ [pid 7830] +++ exited with 0 +++ [pid 7828] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2786, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./935", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./935", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./935/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./935/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./935/cgroup.cpu") = 0 [pid 5028] umount2("./935/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./935/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./935/binderfs") = 0 [pid 5028] umount2("./935/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./935/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./935/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./935/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./935/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./935/file0") = 0 [pid 5028] umount2("./935/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./935/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./935/cgroup") = 0 [pid 5028] umount2("./935/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./935/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./935/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./935") = 0 [pid 5028] mkdir("./936", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2789 ./strace-static-x86_64: Process 7831 attached [pid 7831] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7831] chdir("./936") = 0 [pid 7831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7831] setpgid(0, 0) = 0 [pid 7831] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7831] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7831] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7831] write(3, "1000", 4) = 4 [pid 7831] close(3) = 0 [pid 7831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7831] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7831] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7831] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7831] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7832 attached [pid 7832] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7832] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7832] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7832] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7831] <... clone3 resumed> => {parent_tid=[2790]}, 88) = 2790 [pid 7831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7831] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7832] <... futex resumed>) = 0 [pid 7831] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7832] memfd_create("syzkaller", 0) = 3 [pid 7832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7832] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7832] munmap(0x7feef78ae000, 2097152) = 0 [pid 7832] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7832] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7832] close(3) = 0 [pid 7832] mkdir("./file0", 0777) = 0 [pid 7832] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7832] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7832] chdir("./file0") = 0 [pid 7832] ioctl(4, LOOP_CLR_FD) = 0 [pid 7832] close(4) = 0 [pid 7832] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7832] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7831] <... futex resumed>) = 0 [pid 7831] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7832] <... futex resumed>) = 0 [pid 7831] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7832] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7832] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7832] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7831] <... futex resumed>) = 0 [pid 7831] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7832] <... futex resumed>) = 0 [pid 7831] <... futex resumed>) = 1 [pid 7832] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7831] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7832] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7832] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7831] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 282.539020][ T7832] loop0: detected capacity change from 0 to 4096 [ 282.560258][ T7832] ntfs: volume version 3.1. [pid 7831] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7831] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7831] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7831] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7831] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7833 attached [pid 7833] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7831] <... clone3 resumed> => {parent_tid=[2791]}, 88) = 2791 [pid 7833] set_robust_list(0x7feef7aad9a0, 24 [pid 7831] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7833] <... set_robust_list resumed>) = 0 [pid 7831] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7833] rt_sigprocmask(SIG_SETMASK, [], [pid 7831] <... futex resumed>) = 0 [pid 7831] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7833] ftruncate(4, 0) = 0 [pid 7833] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7832] <... write resumed>) = 1048064 [pid 7833] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7831] <... futex resumed>) = 0 [pid 7832] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7832] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7831] close(3) = 0 [pid 7831] close(4) = 0 [pid 7831] close(5) = 0 [pid 7831] close(6) = -1 EBADF (Bad file descriptor) [pid 7831] close(7) = -1 EBADF (Bad file descriptor) [pid 7831] close(8) = -1 EBADF (Bad file descriptor) [pid 7831] close(9) = -1 EBADF (Bad file descriptor) [pid 7831] close(10) = -1 EBADF (Bad file descriptor) [pid 7831] close(11) = -1 EBADF (Bad file descriptor) [pid 7831] close(12) = -1 EBADF (Bad file descriptor) [pid 7831] close(13) = -1 EBADF (Bad file descriptor) [pid 7831] close(14) = -1 EBADF (Bad file descriptor) [pid 7831] close(15) = -1 EBADF (Bad file descriptor) [pid 7831] close(16) = -1 EBADF (Bad file descriptor) [pid 7831] close(17) = -1 EBADF (Bad file descriptor) [pid 7831] close(18) = -1 EBADF (Bad file descriptor) [pid 7831] close(19) = -1 EBADF (Bad file descriptor) [pid 7831] close(20) = -1 EBADF (Bad file descriptor) [pid 7831] close(21) = -1 EBADF (Bad file descriptor) [pid 7831] close(22) = -1 EBADF (Bad file descriptor) [pid 7831] close(23) = -1 EBADF (Bad file descriptor) [pid 7831] close(24) = -1 EBADF (Bad file descriptor) [pid 7831] close(25) = -1 EBADF (Bad file descriptor) [pid 7831] close(26) = -1 EBADF (Bad file descriptor) [pid 7831] close(27) = -1 EBADF (Bad file descriptor) [pid 7831] close(28) = -1 EBADF (Bad file descriptor) [pid 7831] close(29) = -1 EBADF (Bad file descriptor) [pid 7831] exit_group(0 [pid 7833] <... futex resumed>) = ? [pid 7831] <... exit_group resumed>) = ? [pid 7832] <... futex resumed>) = ? [pid 7832] +++ exited with 0 +++ [pid 7833] +++ exited with 0 +++ [pid 7831] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2789, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./936", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./936", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./936/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./936/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./936/cgroup.cpu") = 0 [pid 5028] umount2("./936/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./936/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./936/binderfs") = 0 [pid 5028] umount2("./936/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./936/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./936/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./936/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./936/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./936/file0") = 0 [pid 5028] umount2("./936/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./936/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./936/cgroup") = 0 [pid 5028] umount2("./936/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./936/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./936/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./936") = 0 [pid 5028] mkdir("./937", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2792 ./strace-static-x86_64: Process 7834 attached [pid 7834] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7834] chdir("./937") = 0 [pid 7834] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7834] setpgid(0, 0) = 0 [pid 7834] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7834] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7834] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7834] write(3, "1000", 4) = 4 [pid 7834] close(3) = 0 [pid 7834] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7834] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7834] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7834] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7834] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7834] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7834] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7835 attached => {parent_tid=[2793]}, 88) = 2793 [pid 7835] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7834] rt_sigprocmask(SIG_SETMASK, [], [pid 7835] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7835] rt_sigprocmask(SIG_SETMASK, [], [pid 7834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7834] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7835] memfd_create("syzkaller", 0 [pid 7834] <... futex resumed>) = 0 [pid 7834] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7835] <... memfd_create resumed>) = 3 [pid 7835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7835] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7835] munmap(0x7feef78ae000, 2097152) = 0 [pid 7835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7835] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7835] close(3) = 0 [pid 7835] mkdir("./file0", 0777) = 0 [ 282.790112][ T7835] loop0: detected capacity change from 0 to 4096 [ 282.799105][ T7835] __ntfs_warning: 12 callbacks suppressed [ 282.799118][ T7835] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [pid 7835] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7835] chdir("./file0") = 0 [pid 7835] ioctl(4, LOOP_CLR_FD) = 0 [pid 7835] close(4) = 0 [pid 7835] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7834] <... futex resumed>) = 0 [pid 7835] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7834] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7834] <... futex resumed>) = 0 [pid 7835] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7834] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7835] <... openat resumed>) = 4 [pid 7835] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7835] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7834] <... futex resumed>) = 0 [pid 7834] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7835] <... futex resumed>) = 0 [pid 7834] <... futex resumed>) = 1 [pid 7835] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7834] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7835] <... openat resumed>) = 5 [pid 7835] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7835] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7834] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7835] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7834] <... futex resumed>) = 0 [ 282.836494][ T7835] ntfs: volume version 3.1. [pid 7834] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7834] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7834] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7834] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7834] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7834] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7836 attached [pid 7836] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7834] <... clone3 resumed> => {parent_tid=[2794]}, 88) = 2794 [pid 7836] <... rseq resumed>) = 0 [pid 7834] rt_sigprocmask(SIG_SETMASK, [], [pid 7836] set_robust_list(0x7feef7aad9a0, 24 [pid 7834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7836] <... set_robust_list resumed>) = 0 [pid 7835] <... write resumed>) = 1048064 [pid 7834] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7835] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7836] rt_sigprocmask(SIG_SETMASK, [], [pid 7834] <... futex resumed>) = 0 [pid 7835] <... futex resumed>) = 0 [pid 7835] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7836] ftruncate(4, 0 [pid 7834] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7836] <... ftruncate resumed>) = 0 [pid 7836] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7836] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7834] <... futex resumed>) = 0 [pid 7834] close(3) = 0 [pid 7834] close(4) = 0 [pid 7834] close(5) = 0 [pid 7834] close(6) = -1 EBADF (Bad file descriptor) [pid 7834] close(7) = -1 EBADF (Bad file descriptor) [pid 7834] close(8) = -1 EBADF (Bad file descriptor) [pid 7834] close(9) = -1 EBADF (Bad file descriptor) [pid 7834] close(10) = -1 EBADF (Bad file descriptor) [pid 7834] close(11) = -1 EBADF (Bad file descriptor) [pid 7834] close(12) = -1 EBADF (Bad file descriptor) [pid 7834] close(13) = -1 EBADF (Bad file descriptor) [pid 7834] close(14) = -1 EBADF (Bad file descriptor) [pid 7834] close(15) = -1 EBADF (Bad file descriptor) [pid 7834] close(16) = -1 EBADF (Bad file descriptor) [pid 7834] close(17) = -1 EBADF (Bad file descriptor) [pid 7834] close(18) = -1 EBADF (Bad file descriptor) [pid 7834] close(19) = -1 EBADF (Bad file descriptor) [pid 7834] close(20) = -1 EBADF (Bad file descriptor) [pid 7834] close(21) = -1 EBADF (Bad file descriptor) [pid 7834] close(22) = -1 EBADF (Bad file descriptor) [pid 7834] close(23) = -1 EBADF (Bad file descriptor) [pid 7834] close(24) = -1 EBADF (Bad file descriptor) [pid 7834] close(25) = -1 EBADF (Bad file descriptor) [pid 7834] close(26) = -1 EBADF (Bad file descriptor) [pid 7834] close(27) = -1 EBADF (Bad file descriptor) [pid 7834] close(28) = -1 EBADF (Bad file descriptor) [pid 7834] close(29) = -1 EBADF (Bad file descriptor) [pid 7834] exit_group(0) = ? [pid 7836] <... futex resumed>) = ? [pid 7835] <... futex resumed>) = ? [pid 7836] +++ exited with 0 +++ [pid 7835] +++ exited with 0 +++ [pid 7834] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2792, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5028] umount2("./937", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./937", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./937/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./937/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./937/cgroup.cpu") = 0 [pid 5028] umount2("./937/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./937/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./937/binderfs") = 0 [pid 5028] umount2("./937/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./937/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./937/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./937/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./937/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./937/file0") = 0 [pid 5028] umount2("./937/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./937/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./937/cgroup") = 0 [pid 5028] umount2("./937/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./937/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./937/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./937") = 0 [pid 5028] mkdir("./938", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7837 attached , child_tidptr=0x5555563a5690) = 2795 [pid 7837] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7837] chdir("./938") = 0 [pid 7837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7837] setpgid(0, 0) = 0 [pid 7837] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7837] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7837] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7837] write(3, "1000", 4) = 4 [pid 7837] close(3) = 0 [pid 7837] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7837] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7837] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7837] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7837] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7837] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7838 attached => {parent_tid=[2796]}, 88) = 2796 [pid 7838] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7837] rt_sigprocmask(SIG_SETMASK, [], [pid 7838] <... rseq resumed>) = 0 [pid 7838] set_robust_list(0x7feeffcce9a0, 24 [pid 7837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7838] <... set_robust_list resumed>) = 0 [pid 7837] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] rt_sigprocmask(SIG_SETMASK, [], [pid 7837] <... futex resumed>) = 0 [pid 7837] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7838] memfd_create("syzkaller", 0) = 3 [pid 7838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7838] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7838] munmap(0x7feef78ae000, 2097152) = 0 [pid 7838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7838] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7838] close(3) = 0 [pid 7838] mkdir("./file0", 0777) = 0 [pid 7838] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7838] chdir("./file0") = 0 [pid 7838] ioctl(4, LOOP_CLR_FD) = 0 [pid 7838] close(4) = 0 [pid 7838] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7837] <... futex resumed>) = 0 [pid 7838] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7837] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7837] <... futex resumed>) = 0 [pid 7838] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7837] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7838] <... openat resumed>) = 4 [pid 7838] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7837] <... futex resumed>) = 0 [pid 7837] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7837] <... futex resumed>) = 0 [pid 7838] <... openat resumed>) = 5 [pid 7837] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7838] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7837] <... futex resumed>) = 0 [pid 7837] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7837] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7838] <... futex resumed>) = 1 [ 283.051106][ T7838] loop0: detected capacity change from 0 to 4096 [ 283.060268][ T7838] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 283.094209][ T7838] ntfs: volume version 3.1. [pid 7838] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7837] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7837] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7837] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7837] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7839 attached => {parent_tid=[2797]}, 88) = 2797 [pid 7837] rt_sigprocmask(SIG_SETMASK, [], [pid 7839] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7839] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7837] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7839] ftruncate(4, 0 [pid 7837] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7839] <... ftruncate resumed>) = 0 [pid 7839] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7838] <... write resumed>) = 1048064 [pid 7839] <... futex resumed>) = 1 [pid 7839] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7837] <... futex resumed>) = 0 [pid 7838] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7838] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7837] close(3) = 0 [pid 7837] close(4) = 0 [pid 7837] close(5) = 0 [pid 7837] close(6) = -1 EBADF (Bad file descriptor) [pid 7837] close(7) = -1 EBADF (Bad file descriptor) [pid 7837] close(8) = -1 EBADF (Bad file descriptor) [pid 7837] close(9) = -1 EBADF (Bad file descriptor) [pid 7837] close(10) = -1 EBADF (Bad file descriptor) [pid 7837] close(11) = -1 EBADF (Bad file descriptor) [pid 7837] close(12) = -1 EBADF (Bad file descriptor) [pid 7837] close(13) = -1 EBADF (Bad file descriptor) [pid 7837] close(14) = -1 EBADF (Bad file descriptor) [pid 7837] close(15) = -1 EBADF (Bad file descriptor) [pid 7837] close(16) = -1 EBADF (Bad file descriptor) [pid 7837] close(17) = -1 EBADF (Bad file descriptor) [pid 7837] close(18) = -1 EBADF (Bad file descriptor) [pid 7837] close(19) = -1 EBADF (Bad file descriptor) [pid 7837] close(20) = -1 EBADF (Bad file descriptor) [pid 7837] close(21) = -1 EBADF (Bad file descriptor) [pid 7837] close(22) = -1 EBADF (Bad file descriptor) [pid 7837] close(23) = -1 EBADF (Bad file descriptor) [pid 7837] close(24) = -1 EBADF (Bad file descriptor) [pid 7837] close(25) = -1 EBADF (Bad file descriptor) [pid 7837] close(26) = -1 EBADF (Bad file descriptor) [pid 7837] close(27) = -1 EBADF (Bad file descriptor) [pid 7837] close(28) = -1 EBADF (Bad file descriptor) [pid 7837] close(29) = -1 EBADF (Bad file descriptor) [pid 7837] exit_group(0) = ? [pid 7839] <... futex resumed>) = ? [pid 7838] <... futex resumed>) = ? [pid 7839] +++ exited with 0 +++ [pid 7838] +++ exited with 0 +++ [pid 7837] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2795, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./938", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./938", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./938/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./938/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./938/cgroup.cpu") = 0 [pid 5028] umount2("./938/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./938/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./938/binderfs") = 0 [pid 5028] umount2("./938/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./938/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./938/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./938/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./938/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./938/file0") = 0 [pid 5028] umount2("./938/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./938/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./938/cgroup") = 0 [pid 5028] umount2("./938/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./938/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./938/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./938") = 0 [pid 5028] mkdir("./939", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2798 ./strace-static-x86_64: Process 7840 attached [pid 7840] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7840] chdir("./939") = 0 [pid 7840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7840] setpgid(0, 0) = 0 [pid 7840] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7840] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7840] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7840] write(3, "1000", 4) = 4 [pid 7840] close(3) = 0 [pid 7840] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7840] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7840] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7840] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7840] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7840] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2799]}, 88) = 2799 [pid 7840] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7840] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7840] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7841 attached [pid 7841] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7841] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7841] memfd_create("syzkaller", 0) = 3 [pid 7841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7841] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7841] munmap(0x7feef78ae000, 2097152) = 0 [pid 7841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7841] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7841] close(3) = 0 [pid 7841] mkdir("./file0", 0777) = 0 [pid 7841] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7841] chdir("./file0") = 0 [pid 7841] ioctl(4, LOOP_CLR_FD) = 0 [pid 7841] close(4) = 0 [pid 7841] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7840] <... futex resumed>) = 0 [pid 7841] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7840] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7840] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7841] <... openat resumed>) = 4 [pid 7841] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7840] <... futex resumed>) = 0 [pid 7841] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7840] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7841] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7840] <... futex resumed>) = 0 [pid 7841] <... openat resumed>) = 5 [pid 7840] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7841] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7841] <... futex resumed>) = 0 [pid 7840] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7841] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7840] <... futex resumed>) = 0 [ 283.315346][ T7841] loop0: detected capacity change from 0 to 4096 [ 283.325458][ T7841] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 283.357710][ T7841] ntfs: volume version 3.1. [pid 7840] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7840] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7840] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7840] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7840] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7842 attached => {parent_tid=[2800]}, 88) = 2800 [pid 7842] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7840] rt_sigprocmask(SIG_SETMASK, [], [pid 7842] <... rseq resumed>) = 0 [pid 7840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7842] set_robust_list(0x7feef7aad9a0, 24 [pid 7840] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7842] <... set_robust_list resumed>) = 0 [pid 7840] <... futex resumed>) = 0 [pid 7842] rt_sigprocmask(SIG_SETMASK, [], [pid 7840] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7842] ftruncate(4, 0) = 0 [pid 7842] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7841] <... write resumed>) = 1048064 [pid 7841] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7841] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7842] <... futex resumed>) = 1 [pid 7840] <... futex resumed>) = 0 [pid 7842] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7840] close(3) = 0 [pid 7840] close(4) = 0 [pid 7840] close(5) = 0 [pid 7840] close(6) = -1 EBADF (Bad file descriptor) [pid 7840] close(7) = -1 EBADF (Bad file descriptor) [pid 7840] close(8) = -1 EBADF (Bad file descriptor) [pid 7840] close(9) = -1 EBADF (Bad file descriptor) [pid 7840] close(10) = -1 EBADF (Bad file descriptor) [pid 7840] close(11) = -1 EBADF (Bad file descriptor) [pid 7840] close(12) = -1 EBADF (Bad file descriptor) [pid 7840] close(13) = -1 EBADF (Bad file descriptor) [pid 7840] close(14) = -1 EBADF (Bad file descriptor) [pid 7840] close(15) = -1 EBADF (Bad file descriptor) [pid 7840] close(16) = -1 EBADF (Bad file descriptor) [pid 7840] close(17) = -1 EBADF (Bad file descriptor) [pid 7840] close(18) = -1 EBADF (Bad file descriptor) [pid 7840] close(19) = -1 EBADF (Bad file descriptor) [pid 7840] close(20) = -1 EBADF (Bad file descriptor) [pid 7840] close(21) = -1 EBADF (Bad file descriptor) [pid 7840] close(22) = -1 EBADF (Bad file descriptor) [pid 7840] close(23) = -1 EBADF (Bad file descriptor) [pid 7840] close(24) = -1 EBADF (Bad file descriptor) [pid 7840] close(25) = -1 EBADF (Bad file descriptor) [pid 7840] close(26) = -1 EBADF (Bad file descriptor) [pid 7840] close(27) = -1 EBADF (Bad file descriptor) [pid 7840] close(28) = -1 EBADF (Bad file descriptor) [pid 7840] close(29) = -1 EBADF (Bad file descriptor) [pid 7840] exit_group(0 [pid 7842] <... futex resumed>) = ? [pid 7841] <... futex resumed>) = ? [pid 7840] <... exit_group resumed>) = ? [pid 7842] +++ exited with 0 +++ [pid 7841] +++ exited with 0 +++ [pid 7840] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2798, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./939", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./939", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./939/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./939/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./939/cgroup.cpu") = 0 [pid 5028] umount2("./939/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./939/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./939/binderfs") = 0 [pid 5028] umount2("./939/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./939/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./939/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./939/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./939/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./939/file0") = 0 [pid 5028] umount2("./939/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./939/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./939/cgroup") = 0 [pid 5028] umount2("./939/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./939/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./939/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./939") = 0 [pid 5028] mkdir("./940", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7843 attached [pid 7843] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2801 [pid 7843] <... set_robust_list resumed>) = 0 [pid 7843] chdir("./940") = 0 [pid 7843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7843] setpgid(0, 0) = 0 [pid 7843] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7843] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7843] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7843] write(3, "1000", 4) = 4 [pid 7843] close(3) = 0 [pid 7843] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7843] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7843] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7843] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7843] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2802]}, 88) = 2802 [pid 7843] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7844 attached [pid 7843] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7843] <... futex resumed>) = 0 [pid 7844] <... rseq resumed>) = 0 [pid 7844] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7844] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7843] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7844] memfd_create("syzkaller", 0) = 3 [pid 7844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7844] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7844] munmap(0x7feef78ae000, 2097152) = 0 [pid 7844] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7844] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7844] close(3) = 0 [pid 7844] mkdir("./file0", 0777) = 0 [pid 7844] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7844] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7844] chdir("./file0") = 0 [pid 7844] ioctl(4, LOOP_CLR_FD) = 0 [pid 7844] close(4) = 0 [pid 7844] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7843] <... futex resumed>) = 0 [pid 7843] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7844] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7843] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7844] <... openat resumed>) = 4 [pid 7844] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7843] <... futex resumed>) = 0 [pid 7843] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7844] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7843] <... futex resumed>) = 0 [pid 7844] <... openat resumed>) = 5 [pid 7843] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7844] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7843] <... futex resumed>) = 0 [pid 7844] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7843] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 283.585850][ T7844] loop0: detected capacity change from 0 to 4096 [ 283.595747][ T7844] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 283.628838][ T7844] ntfs: volume version 3.1. [pid 7843] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7843] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7843] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7843] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7845 attached => {parent_tid=[2803]}, 88) = 2803 [pid 7844] <... write resumed>) = 1048064 [pid 7845] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7843] rt_sigprocmask(SIG_SETMASK, [], [pid 7845] <... rseq resumed>) = 0 [pid 7844] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7845] set_robust_list(0x7feef7aad9a0, 24 [pid 7844] <... futex resumed>) = 0 [pid 7843] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7845] <... set_robust_list resumed>) = 0 [pid 7844] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7843] <... futex resumed>) = 0 [pid 7845] rt_sigprocmask(SIG_SETMASK, [], [pid 7843] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7845] ftruncate(4, 0) = 0 [pid 7845] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7843] <... futex resumed>) = 0 [pid 7845] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7843] close(3) = 0 [pid 7843] close(4) = 0 [pid 7843] close(5) = 0 [pid 7843] close(6) = -1 EBADF (Bad file descriptor) [pid 7843] close(7) = -1 EBADF (Bad file descriptor) [pid 7843] close(8) = -1 EBADF (Bad file descriptor) [pid 7843] close(9) = -1 EBADF (Bad file descriptor) [pid 7843] close(10) = -1 EBADF (Bad file descriptor) [pid 7843] close(11) = -1 EBADF (Bad file descriptor) [pid 7843] close(12) = -1 EBADF (Bad file descriptor) [pid 7843] close(13) = -1 EBADF (Bad file descriptor) [pid 7843] close(14) = -1 EBADF (Bad file descriptor) [pid 7843] close(15) = -1 EBADF (Bad file descriptor) [pid 7843] close(16) = -1 EBADF (Bad file descriptor) [pid 7843] close(17) = -1 EBADF (Bad file descriptor) [pid 7843] close(18) = -1 EBADF (Bad file descriptor) [pid 7843] close(19) = -1 EBADF (Bad file descriptor) [pid 7843] close(20) = -1 EBADF (Bad file descriptor) [pid 7843] close(21) = -1 EBADF (Bad file descriptor) [pid 7843] close(22) = -1 EBADF (Bad file descriptor) [pid 7843] close(23) = -1 EBADF (Bad file descriptor) [pid 7843] close(24) = -1 EBADF (Bad file descriptor) [pid 7843] close(25) = -1 EBADF (Bad file descriptor) [pid 7843] close(26) = -1 EBADF (Bad file descriptor) [pid 7843] close(27) = -1 EBADF (Bad file descriptor) [pid 7843] close(28) = -1 EBADF (Bad file descriptor) [pid 7843] close(29) = -1 EBADF (Bad file descriptor) [pid 7843] exit_group(0 [pid 7844] <... futex resumed>) = ? [pid 7845] <... futex resumed>) = ? [pid 7843] <... exit_group resumed>) = ? [pid 7844] +++ exited with 0 +++ [pid 7845] +++ exited with 0 +++ [pid 7843] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2801, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./940", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./940", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./940/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./940/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./940/cgroup.cpu") = 0 [pid 5028] umount2("./940/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./940/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./940/binderfs") = 0 [pid 5028] umount2("./940/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./940/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./940/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./940/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./940/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./940/file0") = 0 [pid 5028] umount2("./940/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./940/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./940/cgroup") = 0 [pid 5028] umount2("./940/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./940/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./940/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./940") = 0 [pid 5028] mkdir("./941", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7846 attached , child_tidptr=0x5555563a5690) = 2804 [pid 7846] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7846] chdir("./941") = 0 [pid 7846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7846] setpgid(0, 0) = 0 [pid 7846] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7846] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7846] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7846] write(3, "1000", 4) = 4 [pid 7846] close(3) = 0 [pid 7846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7846] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7846] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7846] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7846] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7846] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7846] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7847 attached => {parent_tid=[2805]}, 88) = 2805 [pid 7847] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7846] rt_sigprocmask(SIG_SETMASK, [], [pid 7847] <... rseq resumed>) = 0 [pid 7846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7847] set_robust_list(0x7feeffcce9a0, 24 [pid 7846] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7847] <... set_robust_list resumed>) = 0 [pid 7846] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7847] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7847] memfd_create("syzkaller", 0) = 3 [pid 7847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7847] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7847] munmap(0x7feef78ae000, 2097152) = 0 [pid 7847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7847] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7847] close(3) = 0 [pid 7847] mkdir("./file0", 0777) = 0 [pid 7847] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7847] chdir("./file0") = 0 [pid 7847] ioctl(4, LOOP_CLR_FD) = 0 [pid 7847] close(4) = 0 [pid 7847] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7846] <... futex resumed>) = 0 [pid 7847] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7846] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7846] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7847] <... openat resumed>) = 4 [pid 7847] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7846] <... futex resumed>) = 0 [pid 7846] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7847] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7846] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7847] <... openat resumed>) = 5 [pid 7847] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7846] <... futex resumed>) = 0 [pid 7846] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7847] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7846] <... futex resumed>) = 0 [ 283.852987][ T7847] loop0: detected capacity change from 0 to 4096 [ 283.861871][ T7847] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 283.894995][ T7847] ntfs: volume version 3.1. [pid 7846] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7846] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7846] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7846] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7846] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7848 attached [pid 7848] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7846] <... clone3 resumed> => {parent_tid=[2806]}, 88) = 2806 [pid 7848] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7848] ftruncate(4, 0 [pid 7846] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7848] <... ftruncate resumed>) = 0 [pid 7847] <... write resumed>) = 1048064 [pid 7848] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7847] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7846] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7848] <... futex resumed>) = 0 [pid 7846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7848] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7847] <... futex resumed>) = 0 [pid 7846] close(3 [pid 7847] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7846] <... close resumed>) = 0 [pid 7846] close(4) = 0 [pid 7846] close(5) = 0 [pid 7846] close(6) = -1 EBADF (Bad file descriptor) [pid 7846] close(7) = -1 EBADF (Bad file descriptor) [pid 7846] close(8) = -1 EBADF (Bad file descriptor) [pid 7846] close(9) = -1 EBADF (Bad file descriptor) [pid 7846] close(10) = -1 EBADF (Bad file descriptor) [pid 7846] close(11) = -1 EBADF (Bad file descriptor) [pid 7846] close(12) = -1 EBADF (Bad file descriptor) [pid 7846] close(13) = -1 EBADF (Bad file descriptor) [pid 7846] close(14) = -1 EBADF (Bad file descriptor) [pid 7846] close(15) = -1 EBADF (Bad file descriptor) [pid 7846] close(16) = -1 EBADF (Bad file descriptor) [pid 7846] close(17) = -1 EBADF (Bad file descriptor) [pid 7846] close(18) = -1 EBADF (Bad file descriptor) [pid 7846] close(19) = -1 EBADF (Bad file descriptor) [pid 7846] close(20) = -1 EBADF (Bad file descriptor) [pid 7846] close(21) = -1 EBADF (Bad file descriptor) [pid 7846] close(22) = -1 EBADF (Bad file descriptor) [pid 7846] close(23) = -1 EBADF (Bad file descriptor) [pid 7846] close(24) = -1 EBADF (Bad file descriptor) [pid 7846] close(25) = -1 EBADF (Bad file descriptor) [pid 7846] close(26) = -1 EBADF (Bad file descriptor) [pid 7846] close(27) = -1 EBADF (Bad file descriptor) [pid 7846] close(28) = -1 EBADF (Bad file descriptor) [pid 7846] close(29) = -1 EBADF (Bad file descriptor) [pid 7846] exit_group(0) = ? [pid 7847] <... futex resumed>) = ? [pid 7848] <... futex resumed>) = ? [pid 7847] +++ exited with 0 +++ [pid 7848] +++ exited with 0 +++ [pid 7846] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2804, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./941", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./941", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./941/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./941/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./941/cgroup.cpu") = 0 [pid 5028] umount2("./941/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./941/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./941/binderfs") = 0 [pid 5028] umount2("./941/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./941/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./941/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./941/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./941/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./941/file0") = 0 [pid 5028] umount2("./941/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./941/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./941/cgroup") = 0 [pid 5028] umount2("./941/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./941/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./941/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./941") = 0 [pid 5028] mkdir("./942", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7849 attached , child_tidptr=0x5555563a5690) = 2807 [pid 7849] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7849] chdir("./942") = 0 [pid 7849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7849] setpgid(0, 0) = 0 [pid 7849] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7849] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7849] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7849] write(3, "1000", 4) = 4 [pid 7849] close(3) = 0 [pid 7849] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7849] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7849] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7849] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7849] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7849] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2808]}, 88) = 2808 [pid 7849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7849] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7849] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7850 attached [pid 7850] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7850] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7850] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7850] memfd_create("syzkaller", 0) = 3 [pid 7850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7850] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7850] munmap(0x7feef78ae000, 2097152) = 0 [pid 7850] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7850] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7850] close(3) = 0 [pid 7850] mkdir("./file0", 0777) = 0 [pid 7850] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7850] chdir("./file0") = 0 [pid 7850] ioctl(4, LOOP_CLR_FD) = 0 [pid 7850] close(4) = 0 [pid 7850] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7850] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7849] <... futex resumed>) = 0 [pid 7849] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7850] <... futex resumed>) = 0 [pid 7850] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7849] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7850] <... openat resumed>) = 4 [pid 7850] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7850] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7849] <... futex resumed>) = 0 [pid 7849] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7850] <... futex resumed>) = 0 [pid 7849] <... futex resumed>) = 1 [pid 7850] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7849] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7850] <... openat resumed>) = 5 [pid 7850] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7849] <... futex resumed>) = 0 [pid 7850] <... futex resumed>) = 1 [pid 7849] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7850] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7849] <... futex resumed>) = 0 [ 284.103294][ T7850] loop0: detected capacity change from 0 to 4096 [ 284.113337][ T7850] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 284.146865][ T7850] ntfs: volume version 3.1. [pid 7849] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7849] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7849] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7849] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7849] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7849] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2809]}, 88) = 2809 [pid 7849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7849] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7849] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7851 attached [pid 7851] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7851] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7851] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7851] ftruncate(4, 0) = 0 [pid 7851] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7851] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7849] <... futex resumed>) = 0 [pid 7850] <... write resumed>) = 1048064 [pid 7850] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7850] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7849] close(3) = 0 [pid 7849] close(4) = 0 [pid 7849] close(5) = 0 [pid 7849] close(6) = -1 EBADF (Bad file descriptor) [pid 7849] close(7) = -1 EBADF (Bad file descriptor) [pid 7849] close(8) = -1 EBADF (Bad file descriptor) [pid 7849] close(9) = -1 EBADF (Bad file descriptor) [pid 7849] close(10) = -1 EBADF (Bad file descriptor) [pid 7849] close(11) = -1 EBADF (Bad file descriptor) [pid 7849] close(12) = -1 EBADF (Bad file descriptor) [pid 7849] close(13) = -1 EBADF (Bad file descriptor) [pid 7849] close(14) = -1 EBADF (Bad file descriptor) [pid 7849] close(15) = -1 EBADF (Bad file descriptor) [pid 7849] close(16) = -1 EBADF (Bad file descriptor) [pid 7849] close(17) = -1 EBADF (Bad file descriptor) [pid 7849] close(18) = -1 EBADF (Bad file descriptor) [pid 7849] close(19) = -1 EBADF (Bad file descriptor) [pid 7849] close(20) = -1 EBADF (Bad file descriptor) [pid 7849] close(21) = -1 EBADF (Bad file descriptor) [pid 7849] close(22) = -1 EBADF (Bad file descriptor) [pid 7849] close(23) = -1 EBADF (Bad file descriptor) [pid 7849] close(24) = -1 EBADF (Bad file descriptor) [pid 7849] close(25) = -1 EBADF (Bad file descriptor) [pid 7849] close(26) = -1 EBADF (Bad file descriptor) [pid 7849] close(27) = -1 EBADF (Bad file descriptor) [pid 7849] close(28) = -1 EBADF (Bad file descriptor) [pid 7849] close(29) = -1 EBADF (Bad file descriptor) [pid 7849] exit_group(0) = ? [pid 7850] <... futex resumed>) = ? [pid 7851] <... futex resumed>) = ? [pid 7850] +++ exited with 0 +++ [pid 7851] +++ exited with 0 +++ [pid 7849] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2807, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./942", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./942", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./942/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./942/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./942/cgroup.cpu") = 0 [pid 5028] umount2("./942/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./942/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./942/binderfs") = 0 [pid 5028] umount2("./942/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./942/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./942/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./942/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./942/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./942/file0") = 0 [pid 5028] umount2("./942/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./942/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./942/cgroup") = 0 [pid 5028] umount2("./942/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./942/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./942/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./942") = 0 [pid 5028] mkdir("./943", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2810 ./strace-static-x86_64: Process 7852 attached [pid 7852] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7852] chdir("./943") = 0 [pid 7852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7852] setpgid(0, 0) = 0 [pid 7852] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7852] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7852] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7852] write(3, "1000", 4) = 4 [pid 7852] close(3) = 0 [pid 7852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7852] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7852] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7852] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7852] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2811]}, 88) = 2811 ./strace-static-x86_64: Process 7853 attached [pid 7852] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7852] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7852] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7853] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7853] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7853] memfd_create("syzkaller", 0) = 3 [pid 7853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7853] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7853] munmap(0x7feef78ae000, 2097152) = 0 [pid 7853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7853] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7853] close(3) = 0 [pid 7853] mkdir("./file0", 0777) = 0 [pid 7853] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7853] chdir("./file0") = 0 [pid 7853] ioctl(4, LOOP_CLR_FD) = 0 [pid 7853] close(4) = 0 [pid 7853] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7852] <... futex resumed>) = 0 [pid 7853] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7852] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7852] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7853] <... openat resumed>) = 4 [pid 7853] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7852] <... futex resumed>) = 0 [pid 7852] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7853] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7852] <... futex resumed>) = 0 [pid 7852] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7853] <... openat resumed>) = 5 [pid 7853] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7852] <... futex resumed>) = 0 [pid 7852] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7853] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7852] <... futex resumed>) = 0 [ 284.355622][ T7853] loop0: detected capacity change from 0 to 4096 [ 284.364944][ T7853] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 284.397824][ T7853] ntfs: volume version 3.1. [pid 7852] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7852] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7852] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7852] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7852] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7852] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7854 attached [pid 7854] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7852] <... clone3 resumed> => {parent_tid=[2812]}, 88) = 2812 [pid 7854] <... rseq resumed>) = 0 [pid 7854] set_robust_list(0x7feef7aad9a0, 24 [pid 7852] rt_sigprocmask(SIG_SETMASK, [], [pid 7854] <... set_robust_list resumed>) = 0 [pid 7854] rt_sigprocmask(SIG_SETMASK, [], [pid 7852] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7854] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7852] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7852] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7854] <... futex resumed>) = 0 [pid 7854] ftruncate(4, 0) = 0 [pid 7854] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7853] <... write resumed>) = 1048064 [pid 7854] <... futex resumed>) = 1 [pid 7853] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7854] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7853] <... futex resumed>) = 0 [pid 7852] <... futex resumed>) = 0 [pid 7853] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7852] close(3) = 0 [pid 7852] close(4) = 0 [pid 7852] close(5) = 0 [pid 7852] close(6) = -1 EBADF (Bad file descriptor) [pid 7852] close(7) = -1 EBADF (Bad file descriptor) [pid 7852] close(8) = -1 EBADF (Bad file descriptor) [pid 7852] close(9) = -1 EBADF (Bad file descriptor) [pid 7852] close(10) = -1 EBADF (Bad file descriptor) [pid 7852] close(11) = -1 EBADF (Bad file descriptor) [pid 7852] close(12) = -1 EBADF (Bad file descriptor) [pid 7852] close(13) = -1 EBADF (Bad file descriptor) [pid 7852] close(14) = -1 EBADF (Bad file descriptor) [pid 7852] close(15) = -1 EBADF (Bad file descriptor) [pid 7852] close(16) = -1 EBADF (Bad file descriptor) [pid 7852] close(17) = -1 EBADF (Bad file descriptor) [pid 7852] close(18) = -1 EBADF (Bad file descriptor) [pid 7852] close(19) = -1 EBADF (Bad file descriptor) [pid 7852] close(20) = -1 EBADF (Bad file descriptor) [pid 7852] close(21) = -1 EBADF (Bad file descriptor) [pid 7852] close(22) = -1 EBADF (Bad file descriptor) [pid 7852] close(23) = -1 EBADF (Bad file descriptor) [pid 7852] close(24) = -1 EBADF (Bad file descriptor) [pid 7852] close(25) = -1 EBADF (Bad file descriptor) [pid 7852] close(26) = -1 EBADF (Bad file descriptor) [pid 7852] close(27) = -1 EBADF (Bad file descriptor) [pid 7852] close(28) = -1 EBADF (Bad file descriptor) [pid 7852] close(29) = -1 EBADF (Bad file descriptor) [pid 7852] exit_group(0) = ? [pid 7853] <... futex resumed>) = ? [pid 7853] +++ exited with 0 +++ [pid 7854] <... futex resumed>) = ? [pid 7854] +++ exited with 0 +++ [pid 7852] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2810, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./943", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./943", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./943/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./943/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./943/cgroup.cpu") = 0 [pid 5028] umount2("./943/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./943/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./943/binderfs") = 0 [pid 5028] umount2("./943/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./943/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./943/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./943/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./943/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./943/file0") = 0 [pid 5028] umount2("./943/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./943/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./943/cgroup") = 0 [pid 5028] umount2("./943/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./943/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./943/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./943") = 0 [pid 5028] mkdir("./944", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7855 attached [pid 7855] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7855] chdir("./944" [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2813 [pid 7855] <... chdir resumed>) = 0 [pid 7855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7855] setpgid(0, 0) = 0 [pid 7855] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7855] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7855] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7855] write(3, "1000", 4) = 4 [pid 7855] close(3) = 0 [pid 7855] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7855] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7855] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7855] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7855] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7855] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2814]}, 88) = 2814 [pid 7855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7855] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7855] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7856 attached [pid 7856] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7856] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7856] memfd_create("syzkaller", 0) = 3 [pid 7856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7856] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7856] munmap(0x7feef78ae000, 2097152) = 0 [pid 7856] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7856] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7856] close(3) = 0 [pid 7856] mkdir("./file0", 0777) = 0 [pid 7856] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7856] chdir("./file0") = 0 [pid 7856] ioctl(4, LOOP_CLR_FD) = 0 [pid 7856] close(4) = 0 [pid 7856] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7856] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7855] <... futex resumed>) = 0 [pid 7855] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7856] <... futex resumed>) = 0 [pid 7855] <... futex resumed>) = 1 [pid 7855] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7856] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7856] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7855] <... futex resumed>) = 0 [pid 7855] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7855] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7856] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7856] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7855] <... futex resumed>) = 0 [pid 7855] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7856] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 284.616590][ T7856] loop0: detected capacity change from 0 to 4096 [ 284.625808][ T7856] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 284.658905][ T7856] ntfs: volume version 3.1. [pid 7855] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7855] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7855] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7855] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7857 attached [pid 7857] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7855] <... clone3 resumed> => {parent_tid=[2815]}, 88) = 2815 [pid 7857] set_robust_list(0x7feef7aad9a0, 24 [pid 7855] rt_sigprocmask(SIG_SETMASK, [], [pid 7857] <... set_robust_list resumed>) = 0 [pid 7855] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7857] rt_sigprocmask(SIG_SETMASK, [], [pid 7855] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7855] <... futex resumed>) = 0 [pid 7857] ftruncate(4, 0 [pid 7855] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7857] <... ftruncate resumed>) = 0 [pid 7856] <... write resumed>) = 1048064 [pid 7857] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7856] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7857] <... futex resumed>) = 1 [pid 7855] <... futex resumed>) = 0 [pid 7857] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7856] <... futex resumed>) = 0 [pid 7855] close(3 [pid 7856] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7855] <... close resumed>) = 0 [pid 7855] close(4) = 0 [pid 7855] close(5) = 0 [pid 7855] close(6) = -1 EBADF (Bad file descriptor) [pid 7855] close(7) = -1 EBADF (Bad file descriptor) [pid 7855] close(8) = -1 EBADF (Bad file descriptor) [pid 7855] close(9) = -1 EBADF (Bad file descriptor) [pid 7855] close(10) = -1 EBADF (Bad file descriptor) [pid 7855] close(11) = -1 EBADF (Bad file descriptor) [pid 7855] close(12) = -1 EBADF (Bad file descriptor) [pid 7855] close(13) = -1 EBADF (Bad file descriptor) [pid 7855] close(14) = -1 EBADF (Bad file descriptor) [pid 7855] close(15) = -1 EBADF (Bad file descriptor) [pid 7855] close(16) = -1 EBADF (Bad file descriptor) [pid 7855] close(17) = -1 EBADF (Bad file descriptor) [pid 7855] close(18) = -1 EBADF (Bad file descriptor) [pid 7855] close(19) = -1 EBADF (Bad file descriptor) [pid 7855] close(20) = -1 EBADF (Bad file descriptor) [pid 7855] close(21) = -1 EBADF (Bad file descriptor) [pid 7855] close(22) = -1 EBADF (Bad file descriptor) [pid 7855] close(23) = -1 EBADF (Bad file descriptor) [pid 7855] close(24) = -1 EBADF (Bad file descriptor) [pid 7855] close(25) = -1 EBADF (Bad file descriptor) [pid 7855] close(26) = -1 EBADF (Bad file descriptor) [pid 7855] close(27) = -1 EBADF (Bad file descriptor) [pid 7855] close(28) = -1 EBADF (Bad file descriptor) [pid 7855] close(29) = -1 EBADF (Bad file descriptor) [pid 7855] exit_group(0) = ? [pid 7856] <... futex resumed>) = ? [pid 7857] <... futex resumed>) = ? [pid 7856] +++ exited with 0 +++ [pid 7857] +++ exited with 0 +++ [pid 7855] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2813, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] umount2("./944", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./944", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./944/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./944/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./944/cgroup.cpu") = 0 [pid 5028] umount2("./944/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./944/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./944/binderfs") = 0 [pid 5028] umount2("./944/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./944/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./944/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./944/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./944/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./944/file0") = 0 [pid 5028] umount2("./944/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./944/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./944/cgroup") = 0 [pid 5028] umount2("./944/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./944/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./944/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./944") = 0 [pid 5028] mkdir("./945", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2816 ./strace-static-x86_64: Process 7858 attached [pid 7858] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7858] chdir("./945") = 0 [pid 7858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7858] setpgid(0, 0) = 0 [pid 7858] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7858] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7858] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7858] write(3, "1000", 4) = 4 [pid 7858] close(3) = 0 [pid 7858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7858] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7858] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7858] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7858] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7858] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7858] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2817]}, 88) = 2817 [pid 7858] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 7859 attached NULL, 8) = 0 [pid 7859] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7858] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7859] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7858] <... futex resumed>) = 0 [pid 7859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7858] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7859] memfd_create("syzkaller", 0) = 3 [pid 7859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7859] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7859] munmap(0x7feef78ae000, 2097152) = 0 [pid 7859] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7859] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7859] close(3) = 0 [pid 7859] mkdir("./file0", 0777) = 0 [pid 7859] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7859] chdir("./file0") = 0 [pid 7859] ioctl(4, LOOP_CLR_FD) = 0 [pid 7859] close(4) = 0 [pid 7859] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7858] <... futex resumed>) = 0 [pid 7859] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7858] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7858] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7859] <... openat resumed>) = 4 [pid 7859] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7858] <... futex resumed>) = 0 [pid 7858] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7859] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7858] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7859] <... openat resumed>) = 5 [pid 7859] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7858] <... futex resumed>) = 0 [pid 7859] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7858] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7859] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7858] <... futex resumed>) = 0 [ 284.864385][ T7859] loop0: detected capacity change from 0 to 4096 [ 284.873354][ T7859] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 284.906712][ T7859] ntfs: volume version 3.1. [pid 7858] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7858] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7858] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7858] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7858] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7858] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0} => {parent_tid=[2818]}, 88) = 2818 [pid 7858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7858] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7858] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 7860 attached [pid 7860] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7860] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7860] ftruncate(4, 0) = 0 [pid 7860] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7859] <... write resumed>) = 1048064 [pid 7858] <... futex resumed>) = 0 [pid 7860] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7859] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7858] close(3 [pid 7859] <... futex resumed>) = 0 [pid 7858] <... close resumed>) = 0 [pid 7859] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7858] close(4) = 0 [pid 7858] close(5) = 0 [pid 7858] close(6) = -1 EBADF (Bad file descriptor) [pid 7858] close(7) = -1 EBADF (Bad file descriptor) [pid 7858] close(8) = -1 EBADF (Bad file descriptor) [pid 7858] close(9) = -1 EBADF (Bad file descriptor) [pid 7858] close(10) = -1 EBADF (Bad file descriptor) [pid 7858] close(11) = -1 EBADF (Bad file descriptor) [pid 7858] close(12) = -1 EBADF (Bad file descriptor) [pid 7858] close(13) = -1 EBADF (Bad file descriptor) [pid 7858] close(14) = -1 EBADF (Bad file descriptor) [pid 7858] close(15) = -1 EBADF (Bad file descriptor) [pid 7858] close(16) = -1 EBADF (Bad file descriptor) [pid 7858] close(17) = -1 EBADF (Bad file descriptor) [pid 7858] close(18) = -1 EBADF (Bad file descriptor) [pid 7858] close(19) = -1 EBADF (Bad file descriptor) [pid 7858] close(20) = -1 EBADF (Bad file descriptor) [pid 7858] close(21) = -1 EBADF (Bad file descriptor) [pid 7858] close(22) = -1 EBADF (Bad file descriptor) [pid 7858] close(23) = -1 EBADF (Bad file descriptor) [pid 7858] close(24) = -1 EBADF (Bad file descriptor) [pid 7858] close(25) = -1 EBADF (Bad file descriptor) [pid 7858] close(26) = -1 EBADF (Bad file descriptor) [pid 7858] close(27) = -1 EBADF (Bad file descriptor) [pid 7858] close(28) = -1 EBADF (Bad file descriptor) [pid 7858] close(29) = -1 EBADF (Bad file descriptor) [pid 7858] exit_group(0) = ? [pid 7860] <... futex resumed>) = ? [pid 7859] <... futex resumed>) = ? [pid 7860] +++ exited with 0 +++ [pid 7859] +++ exited with 0 +++ [pid 7858] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2816, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./945", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./945", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./945/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./945/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./945/cgroup.cpu") = 0 [pid 5028] umount2("./945/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./945/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./945/binderfs") = 0 [pid 5028] umount2("./945/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./945/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./945/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./945/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./945/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./945/file0") = 0 [pid 5028] umount2("./945/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./945/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./945/cgroup") = 0 [pid 5028] umount2("./945/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./945/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./945/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./945") = 0 [pid 5028] mkdir("./946", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2819 ./strace-static-x86_64: Process 7861 attached [pid 7861] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7861] chdir("./946") = 0 [pid 7861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7861] setpgid(0, 0) = 0 [pid 7861] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7861] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7861] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7861] write(3, "1000", 4) = 4 [pid 7861] close(3) = 0 [pid 7861] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7861] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7861] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7861] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7861] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7861] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7861] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7862 attached => {parent_tid=[2820]}, 88) = 2820 [pid 7862] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7861] rt_sigprocmask(SIG_SETMASK, [], [pid 7862] <... rseq resumed>) = 0 [pid 7861] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7862] set_robust_list(0x7feeffcce9a0, 24 [pid 7861] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7862] <... set_robust_list resumed>) = 0 [pid 7861] <... futex resumed>) = 0 [pid 7862] rt_sigprocmask(SIG_SETMASK, [], [pid 7861] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7862] memfd_create("syzkaller", 0) = 3 [pid 7862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7862] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7862] munmap(0x7feef78ae000, 2097152) = 0 [pid 7862] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7862] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7862] close(3) = 0 [pid 7862] mkdir("./file0", 0777) = 0 [pid 7862] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7862] chdir("./file0") = 0 [pid 7862] ioctl(4, LOOP_CLR_FD) = 0 [pid 7862] close(4) = 0 [pid 7862] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7861] <... futex resumed>) = 0 [pid 7861] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7861] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7862] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7862] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7861] <... futex resumed>) = 0 [pid 7862] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7861] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7862] <... openat resumed>) = 5 [pid 7862] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7862] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7861] <... futex resumed>) = 1 [pid 7862] <... futex resumed>) = 0 [pid 7861] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7862] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7861] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7862] <... futex resumed>) = 0 [pid 7861] <... futex resumed>) = 1 [pid 7862] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 285.118542][ T7862] loop0: detected capacity change from 0 to 4096 [ 285.127581][ T7862] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 285.159506][ T7862] ntfs: volume version 3.1. [pid 7861] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7861] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7861] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7861] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7861] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7863 attached [pid 7863] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7861] <... clone3 resumed> => {parent_tid=[2821]}, 88) = 2821 [pid 7861] rt_sigprocmask(SIG_SETMASK, [], [pid 7863] <... rseq resumed>) = 0 [pid 7863] set_robust_list(0x7feef7aad9a0, 24 [pid 7861] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7863] <... set_robust_list resumed>) = 0 [pid 7861] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7863] rt_sigprocmask(SIG_SETMASK, [], [pid 7861] <... futex resumed>) = 0 [pid 7863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7861] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7863] ftruncate(4, 0) = 0 [pid 7863] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7861] <... futex resumed>) = 0 [pid 7863] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7862] <... write resumed>) = 1048064 [pid 7862] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7862] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7861] close(3) = 0 [pid 7861] close(4) = 0 [pid 7861] close(5) = 0 [pid 7861] close(6) = -1 EBADF (Bad file descriptor) [pid 7861] close(7) = -1 EBADF (Bad file descriptor) [pid 7861] close(8) = -1 EBADF (Bad file descriptor) [pid 7861] close(9) = -1 EBADF (Bad file descriptor) [pid 7861] close(10) = -1 EBADF (Bad file descriptor) [pid 7861] close(11) = -1 EBADF (Bad file descriptor) [pid 7861] close(12) = -1 EBADF (Bad file descriptor) [pid 7861] close(13) = -1 EBADF (Bad file descriptor) [pid 7861] close(14) = -1 EBADF (Bad file descriptor) [pid 7861] close(15) = -1 EBADF (Bad file descriptor) [pid 7861] close(16) = -1 EBADF (Bad file descriptor) [pid 7861] close(17) = -1 EBADF (Bad file descriptor) [pid 7861] close(18) = -1 EBADF (Bad file descriptor) [pid 7861] close(19) = -1 EBADF (Bad file descriptor) [pid 7861] close(20) = -1 EBADF (Bad file descriptor) [pid 7861] close(21) = -1 EBADF (Bad file descriptor) [pid 7861] close(22) = -1 EBADF (Bad file descriptor) [pid 7861] close(23) = -1 EBADF (Bad file descriptor) [pid 7861] close(24) = -1 EBADF (Bad file descriptor) [pid 7861] close(25) = -1 EBADF (Bad file descriptor) [pid 7861] close(26) = -1 EBADF (Bad file descriptor) [pid 7861] close(27) = -1 EBADF (Bad file descriptor) [pid 7861] close(28) = -1 EBADF (Bad file descriptor) [pid 7861] close(29) = -1 EBADF (Bad file descriptor) [pid 7861] exit_group(0 [pid 7863] <... futex resumed>) = ? [pid 7862] <... futex resumed>) = ? [pid 7863] +++ exited with 0 +++ [pid 7861] <... exit_group resumed>) = ? [pid 7862] +++ exited with 0 +++ [pid 7861] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2819, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./946", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./946", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./946/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./946/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./946/cgroup.cpu") = 0 [pid 5028] umount2("./946/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./946/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./946/binderfs") = 0 [pid 5028] umount2("./946/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./946/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./946/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./946/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./946/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./946/file0") = 0 [pid 5028] umount2("./946/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./946/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./946/cgroup") = 0 [pid 5028] umount2("./946/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./946/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./946/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./946") = 0 [pid 5028] mkdir("./947", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7864 attached [pid 7864] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2822 [pid 7864] <... set_robust_list resumed>) = 0 [pid 7864] chdir("./947") = 0 [pid 7864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7864] setpgid(0, 0) = 0 [pid 7864] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7864] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7864] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7864] write(3, "1000", 4) = 4 [pid 7864] close(3) = 0 [pid 7864] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7864] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7864] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7864] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7864] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7864] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7865 attached => {parent_tid=[2823]}, 88) = 2823 [pid 7864] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7864] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7864] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7865] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7865] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7865] memfd_create("syzkaller", 0) = 3 [pid 7865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7865] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7865] munmap(0x7feef78ae000, 2097152) = 0 [pid 7865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7865] close(3) = 0 [pid 7865] mkdir("./file0", 0777) = 0 [pid 7865] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7865] chdir("./file0") = 0 [pid 7865] ioctl(4, LOOP_CLR_FD) = 0 [pid 7865] close(4) = 0 [pid 7865] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7864] <... futex resumed>) = 0 [pid 7865] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7864] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7864] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7865] <... openat resumed>) = 4 [pid 7865] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7864] <... futex resumed>) = 0 [pid 7864] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7865] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7864] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7865] <... openat resumed>) = 5 [pid 7865] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7865] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7864] <... futex resumed>) = 0 [pid 7864] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7865] <... futex resumed>) = 0 [pid 7864] <... futex resumed>) = 1 [pid 7865] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 285.363794][ T7865] loop0: detected capacity change from 0 to 4096 [ 285.387525][ T7865] ntfs: volume version 3.1. [pid 7864] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7864] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7864] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7864] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7866 attached [pid 7866] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7864] <... clone3 resumed> => {parent_tid=[2824]}, 88) = 2824 [pid 7866] <... rseq resumed>) = 0 [pid 7864] rt_sigprocmask(SIG_SETMASK, [], [pid 7866] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7864] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7866] ftruncate(4, 0 [pid 7864] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7866] <... ftruncate resumed>) = 0 [pid 7865] <... write resumed>) = 1048064 [pid 7866] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7865] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7866] <... futex resumed>) = 1 [pid 7866] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7865] <... futex resumed>) = 0 [pid 7865] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7864] <... futex resumed>) = 0 [pid 7864] close(3) = 0 [pid 7864] close(4) = 0 [pid 7864] close(5) = 0 [pid 7864] close(6) = -1 EBADF (Bad file descriptor) [pid 7864] close(7) = -1 EBADF (Bad file descriptor) [pid 7864] close(8) = -1 EBADF (Bad file descriptor) [pid 7864] close(9) = -1 EBADF (Bad file descriptor) [pid 7864] close(10) = -1 EBADF (Bad file descriptor) [pid 7864] close(11) = -1 EBADF (Bad file descriptor) [pid 7864] close(12) = -1 EBADF (Bad file descriptor) [pid 7864] close(13) = -1 EBADF (Bad file descriptor) [pid 7864] close(14) = -1 EBADF (Bad file descriptor) [pid 7864] close(15) = -1 EBADF (Bad file descriptor) [pid 7864] close(16) = -1 EBADF (Bad file descriptor) [pid 7864] close(17) = -1 EBADF (Bad file descriptor) [pid 7864] close(18) = -1 EBADF (Bad file descriptor) [pid 7864] close(19) = -1 EBADF (Bad file descriptor) [pid 7864] close(20) = -1 EBADF (Bad file descriptor) [pid 7864] close(21) = -1 EBADF (Bad file descriptor) [pid 7864] close(22) = -1 EBADF (Bad file descriptor) [pid 7864] close(23) = -1 EBADF (Bad file descriptor) [pid 7864] close(24) = -1 EBADF (Bad file descriptor) [pid 7864] close(25) = -1 EBADF (Bad file descriptor) [pid 7864] close(26) = -1 EBADF (Bad file descriptor) [pid 7864] close(27) = -1 EBADF (Bad file descriptor) [pid 7864] close(28) = -1 EBADF (Bad file descriptor) [pid 7864] close(29) = -1 EBADF (Bad file descriptor) [pid 7864] exit_group(0) = ? [pid 7865] <... futex resumed>) = ? [pid 7866] <... futex resumed>) = ? [pid 7865] +++ exited with 0 +++ [pid 7866] +++ exited with 0 +++ [pid 7864] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2822, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./947", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./947", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./947/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./947/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./947/cgroup.cpu") = 0 [pid 5028] umount2("./947/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./947/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./947/binderfs") = 0 [pid 5028] umount2("./947/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./947/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./947/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./947/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./947/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./947/file0") = 0 [pid 5028] umount2("./947/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./947/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./947/cgroup") = 0 [pid 5028] umount2("./947/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./947/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./947/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./947") = 0 [pid 5028] mkdir("./948", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7867 attached , child_tidptr=0x5555563a5690) = 2825 [pid 7867] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7867] chdir("./948") = 0 [pid 7867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7867] setpgid(0, 0) = 0 [pid 7867] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7867] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7867] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7867] write(3, "1000", 4) = 4 [pid 7867] close(3) = 0 [pid 7867] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7867] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7867] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7867] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7867] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7867] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7868 attached => {parent_tid=[2826]}, 88) = 2826 [pid 7867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7867] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7867] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7868] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7868] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7868] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7868] memfd_create("syzkaller", 0) = 3 [pid 7868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7868] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7868] munmap(0x7feef78ae000, 2097152) = 0 [pid 7868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7868] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7868] close(3) = 0 [pid 7868] mkdir("./file0", 0777) = 0 [pid 7868] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7868] chdir("./file0") = 0 [pid 7868] ioctl(4, LOOP_CLR_FD) = 0 [pid 7868] close(4) = 0 [pid 7868] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7867] <... futex resumed>) = 0 [pid 7867] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7867] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7868] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7868] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7867] <... futex resumed>) = 0 [pid 7868] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7867] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] <... futex resumed>) = 0 [pid 7868] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7868] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7867] <... futex resumed>) = 1 [pid 7868] <... futex resumed>) = 0 [pid 7867] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7868] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7867] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] <... futex resumed>) = 0 [pid 7867] <... futex resumed>) = 1 [pid 7868] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 285.595553][ T7868] loop0: detected capacity change from 0 to 4096 [ 285.616588][ T7868] ntfs: volume version 3.1. [pid 7867] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7867] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7867] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7867] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7869 attached [pid 7869] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7869] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7867] <... clone3 resumed> => {parent_tid=[2827]}, 88) = 2827 [pid 7869] rt_sigprocmask(SIG_SETMASK, [], [pid 7867] rt_sigprocmask(SIG_SETMASK, [], [pid 7869] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7869] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7867] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7869] ftruncate(4, 0 [pid 7867] <... futex resumed>) = 0 [pid 7867] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7869] <... ftruncate resumed>) = 0 [pid 7869] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7868] <... write resumed>) = 1048064 [pid 7869] <... futex resumed>) = 1 [pid 7868] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7869] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7868] <... futex resumed>) = 0 [pid 7867] <... futex resumed>) = 0 [pid 7868] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7867] close(3) = 0 [pid 7867] close(4) = 0 [pid 7867] close(5) = 0 [pid 7867] close(6) = -1 EBADF (Bad file descriptor) [pid 7867] close(7) = -1 EBADF (Bad file descriptor) [pid 7867] close(8) = -1 EBADF (Bad file descriptor) [pid 7867] close(9) = -1 EBADF (Bad file descriptor) [pid 7867] close(10) = -1 EBADF (Bad file descriptor) [pid 7867] close(11) = -1 EBADF (Bad file descriptor) [pid 7867] close(12) = -1 EBADF (Bad file descriptor) [pid 7867] close(13) = -1 EBADF (Bad file descriptor) [pid 7867] close(14) = -1 EBADF (Bad file descriptor) [pid 7867] close(15) = -1 EBADF (Bad file descriptor) [pid 7867] close(16) = -1 EBADF (Bad file descriptor) [pid 7867] close(17) = -1 EBADF (Bad file descriptor) [pid 7867] close(18) = -1 EBADF (Bad file descriptor) [pid 7867] close(19) = -1 EBADF (Bad file descriptor) [pid 7867] close(20) = -1 EBADF (Bad file descriptor) [pid 7867] close(21) = -1 EBADF (Bad file descriptor) [pid 7867] close(22) = -1 EBADF (Bad file descriptor) [pid 7867] close(23) = -1 EBADF (Bad file descriptor) [pid 7867] close(24) = -1 EBADF (Bad file descriptor) [pid 7867] close(25) = -1 EBADF (Bad file descriptor) [pid 7867] close(26) = -1 EBADF (Bad file descriptor) [pid 7867] close(27) = -1 EBADF (Bad file descriptor) [pid 7867] close(28) = -1 EBADF (Bad file descriptor) [pid 7867] close(29) = -1 EBADF (Bad file descriptor) [pid 7867] exit_group(0) = ? [pid 7869] <... futex resumed>) = ? [pid 7868] <... futex resumed>) = ? [pid 7869] +++ exited with 0 +++ [pid 7868] +++ exited with 0 +++ [pid 7867] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2825, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./948", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./948", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./948/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./948/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./948/cgroup.cpu") = 0 [pid 5028] umount2("./948/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./948/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./948/binderfs") = 0 [pid 5028] umount2("./948/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./948/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./948/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./948/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./948/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./948/file0") = 0 [pid 5028] umount2("./948/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./948/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./948/cgroup") = 0 [pid 5028] umount2("./948/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./948/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./948/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./948") = 0 [pid 5028] mkdir("./949", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7870 attached , child_tidptr=0x5555563a5690) = 2828 [pid 7870] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7870] chdir("./949") = 0 [pid 7870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7870] setpgid(0, 0) = 0 [pid 7870] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7870] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7870] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7870] write(3, "1000", 4) = 4 [pid 7870] close(3) = 0 [pid 7870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7870] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7870] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7870] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7870] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7871 attached [pid 7871] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7871] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7871] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7870] <... clone3 resumed> => {parent_tid=[2829]}, 88) = 2829 [pid 7870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7870] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7871] <... futex resumed>) = 0 [pid 7871] memfd_create("syzkaller", 0 [pid 7870] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7871] <... memfd_create resumed>) = 3 [pid 7871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7871] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7871] munmap(0x7feef78ae000, 2097152) = 0 [pid 7871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7871] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7871] close(3) = 0 [pid 7871] mkdir("./file0", 0777) = 0 [pid 7871] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7871] chdir("./file0") = 0 [pid 7871] ioctl(4, LOOP_CLR_FD) = 0 [pid 7871] close(4) = 0 [pid 7871] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7870] <... futex resumed>) = 0 [pid 7870] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7871] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7870] <... futex resumed>) = 0 [pid 7871] <... openat resumed>) = 4 [pid 7870] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7871] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7870] <... futex resumed>) = 0 [pid 7870] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7871] <... futex resumed>) = 1 [pid 7870] <... futex resumed>) = 0 [pid 7870] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7871] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7871] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7870] <... futex resumed>) = 0 [pid 7871] <... futex resumed>) = 1 [pid 7870] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 285.830344][ T7871] loop0: detected capacity change from 0 to 4096 [ 285.852536][ T7871] ntfs: volume version 3.1. [pid 7871] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7870] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7870] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7870] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7872 attached [pid 7872] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7872] set_robust_list(0x7feef7aad9a0, 24 [pid 7870] <... clone3 resumed> => {parent_tid=[2830]}, 88) = 2830 [pid 7872] <... set_robust_list resumed>) = 0 [pid 7870] rt_sigprocmask(SIG_SETMASK, [], [pid 7872] rt_sigprocmask(SIG_SETMASK, [], [pid 7870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7872] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7872] ftruncate(4, 0 [pid 7870] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7870] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7872] <... ftruncate resumed>) = 0 [pid 7872] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7871] <... write resumed>) = 1048064 [pid 7872] <... futex resumed>) = 1 [pid 7872] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7870] <... futex resumed>) = 0 [pid 7871] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7870] close(3 [pid 7871] <... futex resumed>) = 0 [pid 7871] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7870] <... close resumed>) = 0 [pid 7870] close(4) = 0 [pid 7870] close(5) = 0 [pid 7870] close(6) = -1 EBADF (Bad file descriptor) [pid 7870] close(7) = -1 EBADF (Bad file descriptor) [pid 7870] close(8) = -1 EBADF (Bad file descriptor) [pid 7870] close(9) = -1 EBADF (Bad file descriptor) [pid 7870] close(10) = -1 EBADF (Bad file descriptor) [pid 7870] close(11) = -1 EBADF (Bad file descriptor) [pid 7870] close(12) = -1 EBADF (Bad file descriptor) [pid 7870] close(13) = -1 EBADF (Bad file descriptor) [pid 7870] close(14) = -1 EBADF (Bad file descriptor) [pid 7870] close(15) = -1 EBADF (Bad file descriptor) [pid 7870] close(16) = -1 EBADF (Bad file descriptor) [pid 7870] close(17) = -1 EBADF (Bad file descriptor) [pid 7870] close(18) = -1 EBADF (Bad file descriptor) [pid 7870] close(19) = -1 EBADF (Bad file descriptor) [pid 7870] close(20) = -1 EBADF (Bad file descriptor) [pid 7870] close(21) = -1 EBADF (Bad file descriptor) [pid 7870] close(22) = -1 EBADF (Bad file descriptor) [pid 7870] close(23) = -1 EBADF (Bad file descriptor) [pid 7870] close(24) = -1 EBADF (Bad file descriptor) [pid 7870] close(25) = -1 EBADF (Bad file descriptor) [pid 7870] close(26) = -1 EBADF (Bad file descriptor) [pid 7870] close(27) = -1 EBADF (Bad file descriptor) [pid 7870] close(28) = -1 EBADF (Bad file descriptor) [pid 7870] close(29) = -1 EBADF (Bad file descriptor) [pid 7870] exit_group(0 [pid 7872] <... futex resumed>) = ? [pid 7870] <... exit_group resumed>) = ? [pid 7872] +++ exited with 0 +++ [pid 7871] <... futex resumed>) = ? [pid 7871] +++ exited with 0 +++ [pid 7870] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2828, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./949", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./949", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./949/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./949/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./949/cgroup.cpu") = 0 [pid 5028] umount2("./949/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./949/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./949/binderfs") = 0 [pid 5028] umount2("./949/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./949/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./949/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./949/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./949/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./949/file0") = 0 [pid 5028] umount2("./949/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./949/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./949/cgroup") = 0 [pid 5028] umount2("./949/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./949/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./949/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./949") = 0 [pid 5028] mkdir("./950", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7873 attached [pid 7873] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2831 [pid 7873] <... set_robust_list resumed>) = 0 [pid 7873] chdir("./950") = 0 [pid 7873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7873] setpgid(0, 0) = 0 [pid 7873] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7873] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7873] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7873] write(3, "1000", 4) = 4 [pid 7873] close(3) = 0 [pid 7873] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7873] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7873] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7873] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7873] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7873] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7873] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2832]}, 88) = 2832 [pid 7873] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7873] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7873] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7874 attached [pid 7874] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7874] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7874] memfd_create("syzkaller", 0) = 3 [pid 7874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7874] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7874] munmap(0x7feef78ae000, 2097152) = 0 [pid 7874] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7874] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7874] close(3) = 0 [pid 7874] mkdir("./file0", 0777) = 0 [pid 7874] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7874] chdir("./file0") = 0 [pid 7874] ioctl(4, LOOP_CLR_FD) = 0 [pid 7874] close(4) = 0 [pid 7874] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7873] <... futex resumed>) = 0 [pid 7874] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7873] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7873] <... futex resumed>) = 0 [pid 7874] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7873] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7874] <... openat resumed>) = 4 [pid 7874] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7873] <... futex resumed>) = 0 [pid 7874] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7873] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7873] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7874] <... openat resumed>) = 5 [pid 7874] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7873] <... futex resumed>) = 0 [pid 7873] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7874] <... futex resumed>) = 1 [pid 7873] <... futex resumed>) = 0 [pid 7874] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 286.080375][ T7874] loop0: detected capacity change from 0 to 4096 [ 286.101505][ T7874] ntfs: volume version 3.1. [pid 7873] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7873] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7873] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7873] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7873] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7875 attached [pid 7875] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7873] <... clone3 resumed> => {parent_tid=[2833]}, 88) = 2833 [pid 7875] <... rseq resumed>) = 0 [pid 7873] rt_sigprocmask(SIG_SETMASK, [], [pid 7875] set_robust_list(0x7feef7aad9a0, 24 [pid 7873] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7873] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7875] <... set_robust_list resumed>) = 0 [pid 7875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7873] <... futex resumed>) = 0 [pid 7875] ftruncate(4, 0 [pid 7873] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7875] <... ftruncate resumed>) = 0 [pid 7875] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7874] <... write resumed>) = 1048064 [pid 7875] <... futex resumed>) = 1 [pid 7875] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7873] <... futex resumed>) = 0 [pid 7874] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7873] close(3 [pid 7874] <... futex resumed>) = 0 [pid 7873] <... close resumed>) = 0 [pid 7874] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7873] close(4) = 0 [pid 7873] close(5) = 0 [pid 7873] close(6) = -1 EBADF (Bad file descriptor) [pid 7873] close(7) = -1 EBADF (Bad file descriptor) [pid 7873] close(8) = -1 EBADF (Bad file descriptor) [pid 7873] close(9) = -1 EBADF (Bad file descriptor) [pid 7873] close(10) = -1 EBADF (Bad file descriptor) [pid 7873] close(11) = -1 EBADF (Bad file descriptor) [pid 7873] close(12) = -1 EBADF (Bad file descriptor) [pid 7873] close(13) = -1 EBADF (Bad file descriptor) [pid 7873] close(14) = -1 EBADF (Bad file descriptor) [pid 7873] close(15) = -1 EBADF (Bad file descriptor) [pid 7873] close(16) = -1 EBADF (Bad file descriptor) [pid 7873] close(17) = -1 EBADF (Bad file descriptor) [pid 7873] close(18) = -1 EBADF (Bad file descriptor) [pid 7873] close(19) = -1 EBADF (Bad file descriptor) [pid 7873] close(20) = -1 EBADF (Bad file descriptor) [pid 7873] close(21) = -1 EBADF (Bad file descriptor) [pid 7873] close(22) = -1 EBADF (Bad file descriptor) [pid 7873] close(23) = -1 EBADF (Bad file descriptor) [pid 7873] close(24) = -1 EBADF (Bad file descriptor) [pid 7873] close(25) = -1 EBADF (Bad file descriptor) [pid 7873] close(26) = -1 EBADF (Bad file descriptor) [pid 7873] close(27) = -1 EBADF (Bad file descriptor) [pid 7873] close(28) = -1 EBADF (Bad file descriptor) [pid 7873] close(29) = -1 EBADF (Bad file descriptor) [pid 7873] exit_group(0 [pid 7875] <... futex resumed>) = ? [pid 7874] <... futex resumed>) = ? [pid 7873] <... exit_group resumed>) = ? [pid 7875] +++ exited with 0 +++ [pid 7874] +++ exited with 0 +++ [pid 7873] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2831, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./950", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./950", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./950/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./950/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./950/cgroup.cpu") = 0 [pid 5028] umount2("./950/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./950/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./950/binderfs") = 0 [pid 5028] umount2("./950/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./950/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./950/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./950/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./950/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./950/file0") = 0 [pid 5028] umount2("./950/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./950/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./950/cgroup") = 0 [pid 5028] umount2("./950/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./950/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./950/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./950") = 0 [pid 5028] mkdir("./951", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7876 attached , child_tidptr=0x5555563a5690) = 2834 [pid 7876] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7876] chdir("./951") = 0 [pid 7876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7876] setpgid(0, 0) = 0 [pid 7876] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7876] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7876] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7876] write(3, "1000", 4) = 4 [pid 7876] close(3) = 0 [pid 7876] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7876] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7876] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7876] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7876] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7876] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7876] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7877 attached => {parent_tid=[2835]}, 88) = 2835 [pid 7877] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7876] rt_sigprocmask(SIG_SETMASK, [], [pid 7877] <... rseq resumed>) = 0 [pid 7876] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7877] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7876] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7877] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7876] <... futex resumed>) = 0 [pid 7876] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7877] memfd_create("syzkaller", 0) = 3 [pid 7877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7877] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7877] munmap(0x7feef78ae000, 2097152) = 0 [pid 7877] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7877] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7877] close(3) = 0 [pid 7877] mkdir("./file0", 0777) = 0 [pid 7877] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7877] chdir("./file0") = 0 [pid 7877] ioctl(4, LOOP_CLR_FD) = 0 [pid 7877] close(4) = 0 [pid 7877] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7877] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7876] <... futex resumed>) = 0 [pid 7876] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7877] <... futex resumed>) = 0 [pid 7876] <... futex resumed>) = 1 [pid 7877] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7876] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7877] <... openat resumed>) = 4 [pid 7877] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7877] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7876] <... futex resumed>) = 0 [pid 7876] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7877] <... futex resumed>) = 0 [pid 7877] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7876] <... futex resumed>) = 1 [pid 7877] <... openat resumed>) = 5 [pid 7876] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7877] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7877] <... futex resumed>) = 0 [pid 7876] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7877] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7876] <... futex resumed>) = 0 [ 286.316654][ T7877] loop0: detected capacity change from 0 to 4096 [ 286.337858][ T7877] ntfs: volume version 3.1. [pid 7876] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7876] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7876] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7876] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7876] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7876] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7876] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7878 attached [pid 7878] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7876] <... clone3 resumed> => {parent_tid=[2836]}, 88) = 2836 [pid 7876] rt_sigprocmask(SIG_SETMASK, [], [pid 7878] <... rseq resumed>) = 0 [pid 7878] set_robust_list(0x7feef7aad9a0, 24 [pid 7876] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7878] <... set_robust_list resumed>) = 0 [pid 7876] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7878] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7877] <... write resumed>) = 1048064 [pid 7876] <... futex resumed>) = 0 [pid 7878] ftruncate(4, 0 [pid 7877] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7876] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7877] <... futex resumed>) = 0 [pid 7877] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7878] <... ftruncate resumed>) = 0 [pid 7878] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7878] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7876] <... futex resumed>) = 0 [pid 7876] close(3) = 0 [pid 7876] close(4) = 0 [pid 7876] close(5) = 0 [pid 7876] close(6) = -1 EBADF (Bad file descriptor) [pid 7876] close(7) = -1 EBADF (Bad file descriptor) [pid 7876] close(8) = -1 EBADF (Bad file descriptor) [pid 7876] close(9) = -1 EBADF (Bad file descriptor) [pid 7876] close(10) = -1 EBADF (Bad file descriptor) [pid 7876] close(11) = -1 EBADF (Bad file descriptor) [pid 7876] close(12) = -1 EBADF (Bad file descriptor) [pid 7876] close(13) = -1 EBADF (Bad file descriptor) [pid 7876] close(14) = -1 EBADF (Bad file descriptor) [pid 7876] close(15) = -1 EBADF (Bad file descriptor) [pid 7876] close(16) = -1 EBADF (Bad file descriptor) [pid 7876] close(17) = -1 EBADF (Bad file descriptor) [pid 7876] close(18) = -1 EBADF (Bad file descriptor) [pid 7876] close(19) = -1 EBADF (Bad file descriptor) [pid 7876] close(20) = -1 EBADF (Bad file descriptor) [pid 7876] close(21) = -1 EBADF (Bad file descriptor) [pid 7876] close(22) = -1 EBADF (Bad file descriptor) [pid 7876] close(23) = -1 EBADF (Bad file descriptor) [pid 7876] close(24) = -1 EBADF (Bad file descriptor) [pid 7876] close(25) = -1 EBADF (Bad file descriptor) [pid 7876] close(26) = -1 EBADF (Bad file descriptor) [pid 7876] close(27) = -1 EBADF (Bad file descriptor) [pid 7876] close(28) = -1 EBADF (Bad file descriptor) [pid 7876] close(29) = -1 EBADF (Bad file descriptor) [pid 7876] exit_group(0 [pid 7877] <... futex resumed>) = ? [pid 7876] <... exit_group resumed>) = ? [pid 7877] +++ exited with 0 +++ [pid 7878] <... futex resumed>) = ? [pid 7878] +++ exited with 0 +++ [pid 7876] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2834, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./951", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./951", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./951/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./951/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./951/cgroup.cpu") = 0 [pid 5028] umount2("./951/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./951/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./951/binderfs") = 0 [pid 5028] umount2("./951/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./951/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./951/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./951/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./951/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./951/file0") = 0 [pid 5028] umount2("./951/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./951/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./951/cgroup") = 0 [pid 5028] umount2("./951/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./951/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./951/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./951") = 0 [pid 5028] mkdir("./952", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7879 attached [pid 7879] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2837 [pid 7879] <... set_robust_list resumed>) = 0 [pid 7879] chdir("./952") = 0 [pid 7879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7879] setpgid(0, 0) = 0 [pid 7879] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7879] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7879] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7879] write(3, "1000", 4) = 4 [pid 7879] close(3) = 0 [pid 7879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7879] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7879] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7879] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7879] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7879] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7879] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2838]}, 88) = 2838 [pid 7879] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7879] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7879] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7880 attached [pid 7880] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7880] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7880] memfd_create("syzkaller", 0) = 3 [pid 7880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7880] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7880] munmap(0x7feef78ae000, 2097152) = 0 [pid 7880] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7880] close(3) = 0 [pid 7880] mkdir("./file0", 0777) = 0 [pid 7880] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7880] chdir("./file0") = 0 [pid 7880] ioctl(4, LOOP_CLR_FD) = 0 [pid 7880] close(4) = 0 [pid 7880] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7879] <... futex resumed>) = 0 [pid 7880] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7879] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7879] <... futex resumed>) = 0 [pid 7880] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7879] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7880] <... openat resumed>) = 4 [pid 7880] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7879] <... futex resumed>) = 0 [pid 7879] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7880] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7879] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7880] <... openat resumed>) = 5 [pid 7880] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7880] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7879] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7880] <... futex resumed>) = 0 [pid 7879] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 286.574492][ T7880] loop0: detected capacity change from 0 to 4096 [ 286.595591][ T7880] ntfs: volume version 3.1. [pid 7880] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7879] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7879] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7879] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7879] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7879] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7881 attached [pid 7881] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7879] <... clone3 resumed> => {parent_tid=[2839]}, 88) = 2839 [pid 7881] <... rseq resumed>) = 0 [pid 7881] set_robust_list(0x7feef7aad9a0, 24 [pid 7879] rt_sigprocmask(SIG_SETMASK, [], [pid 7881] <... set_robust_list resumed>) = 0 [pid 7879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7881] rt_sigprocmask(SIG_SETMASK, [], [pid 7879] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7879] <... futex resumed>) = 0 [pid 7881] ftruncate(4, 0 [pid 7879] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7881] <... ftruncate resumed>) = 0 [pid 7881] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7880] <... write resumed>) = 1048064 [pid 7881] <... futex resumed>) = 1 [pid 7880] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7879] <... futex resumed>) = 0 [pid 7881] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7880] <... futex resumed>) = 0 [pid 7879] close(3 [pid 7880] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7879] <... close resumed>) = 0 [pid 7879] close(4) = 0 [pid 7879] close(5) = 0 [pid 7879] close(6) = -1 EBADF (Bad file descriptor) [pid 7879] close(7) = -1 EBADF (Bad file descriptor) [pid 7879] close(8) = -1 EBADF (Bad file descriptor) [pid 7879] close(9) = -1 EBADF (Bad file descriptor) [pid 7879] close(10) = -1 EBADF (Bad file descriptor) [pid 7879] close(11) = -1 EBADF (Bad file descriptor) [pid 7879] close(12) = -1 EBADF (Bad file descriptor) [pid 7879] close(13) = -1 EBADF (Bad file descriptor) [pid 7879] close(14) = -1 EBADF (Bad file descriptor) [pid 7879] close(15) = -1 EBADF (Bad file descriptor) [pid 7879] close(16) = -1 EBADF (Bad file descriptor) [pid 7879] close(17) = -1 EBADF (Bad file descriptor) [pid 7879] close(18) = -1 EBADF (Bad file descriptor) [pid 7879] close(19) = -1 EBADF (Bad file descriptor) [pid 7879] close(20) = -1 EBADF (Bad file descriptor) [pid 7879] close(21) = -1 EBADF (Bad file descriptor) [pid 7879] close(22) = -1 EBADF (Bad file descriptor) [pid 7879] close(23) = -1 EBADF (Bad file descriptor) [pid 7879] close(24) = -1 EBADF (Bad file descriptor) [pid 7879] close(25) = -1 EBADF (Bad file descriptor) [pid 7879] close(26) = -1 EBADF (Bad file descriptor) [pid 7879] close(27) = -1 EBADF (Bad file descriptor) [pid 7879] close(28) = -1 EBADF (Bad file descriptor) [pid 7879] close(29) = -1 EBADF (Bad file descriptor) [pid 7879] exit_group(0 [pid 7880] <... futex resumed>) = ? [pid 7880] +++ exited with 0 +++ [pid 7879] <... exit_group resumed>) = ? [pid 7881] <... futex resumed>) = ? [pid 7881] +++ exited with 0 +++ [pid 7879] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2837, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./952", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./952", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./952/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./952/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./952/cgroup.cpu") = 0 [pid 5028] umount2("./952/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./952/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./952/binderfs") = 0 [pid 5028] umount2("./952/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./952/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./952/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./952/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./952/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./952/file0") = 0 [pid 5028] umount2("./952/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./952/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./952/cgroup") = 0 [pid 5028] umount2("./952/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./952/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./952/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./952") = 0 [pid 5028] mkdir("./953", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7882 attached [pid 7882] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2840 [pid 7882] <... set_robust_list resumed>) = 0 [pid 7882] chdir("./953") = 0 [pid 7882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7882] setpgid(0, 0) = 0 [pid 7882] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7882] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7882] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7882] write(3, "1000", 4) = 4 [pid 7882] close(3) = 0 [pid 7882] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7882] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7882] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7882] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7882] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7882] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7882] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7882] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2841]}, 88) = 2841 [pid 7882] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7882] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7882] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7883 attached [pid 7883] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7883] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7883] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7883] memfd_create("syzkaller", 0) = 3 [pid 7883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7883] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7883] munmap(0x7feef78ae000, 2097152) = 0 [pid 7883] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7883] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7883] close(3) = 0 [pid 7883] mkdir("./file0", 0777) = 0 [pid 7883] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7883] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7883] chdir("./file0") = 0 [pid 7883] ioctl(4, LOOP_CLR_FD) = 0 [pid 7883] close(4) = 0 [pid 7883] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7882] <... futex resumed>) = 0 [pid 7882] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7882] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7883] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7883] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7882] <... futex resumed>) = 0 [pid 7883] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7882] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7883] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7882] <... futex resumed>) = 0 [pid 7882] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7883] <... openat resumed>) = 5 [pid 7883] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7882] <... futex resumed>) = 0 [pid 7883] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7882] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7883] <... futex resumed>) = 0 [pid 7883] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 286.804236][ T7883] loop0: detected capacity change from 0 to 4096 [ 286.825756][ T7883] ntfs: volume version 3.1. [pid 7882] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7882] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7882] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7882] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7882] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7882] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7884 attached [pid 7884] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7882] <... clone3 resumed> => {parent_tid=[2842]}, 88) = 2842 [pid 7884] <... rseq resumed>) = 0 [pid 7882] rt_sigprocmask(SIG_SETMASK, [], [pid 7884] set_robust_list(0x7feef7aad9a0, 24 [pid 7882] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7884] <... set_robust_list resumed>) = 0 [pid 7882] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7884] rt_sigprocmask(SIG_SETMASK, [], [pid 7882] <... futex resumed>) = 0 [pid 7884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7884] ftruncate(4, 0 [pid 7882] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7884] <... ftruncate resumed>) = 0 [pid 7884] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7883] <... write resumed>) = 1048064 [pid 7884] <... futex resumed>) = 1 [pid 7883] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7884] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7883] <... futex resumed>) = 0 [pid 7883] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7882] <... futex resumed>) = 0 [pid 7882] close(3) = 0 [pid 7882] close(4) = 0 [pid 7882] close(5) = 0 [pid 7882] close(6) = -1 EBADF (Bad file descriptor) [pid 7882] close(7) = -1 EBADF (Bad file descriptor) [pid 7882] close(8) = -1 EBADF (Bad file descriptor) [pid 7882] close(9) = -1 EBADF (Bad file descriptor) [pid 7882] close(10) = -1 EBADF (Bad file descriptor) [pid 7882] close(11) = -1 EBADF (Bad file descriptor) [pid 7882] close(12) = -1 EBADF (Bad file descriptor) [pid 7882] close(13) = -1 EBADF (Bad file descriptor) [pid 7882] close(14) = -1 EBADF (Bad file descriptor) [pid 7882] close(15) = -1 EBADF (Bad file descriptor) [pid 7882] close(16) = -1 EBADF (Bad file descriptor) [pid 7882] close(17) = -1 EBADF (Bad file descriptor) [pid 7882] close(18) = -1 EBADF (Bad file descriptor) [pid 7882] close(19) = -1 EBADF (Bad file descriptor) [pid 7882] close(20) = -1 EBADF (Bad file descriptor) [pid 7882] close(21) = -1 EBADF (Bad file descriptor) [pid 7882] close(22) = -1 EBADF (Bad file descriptor) [pid 7882] close(23) = -1 EBADF (Bad file descriptor) [pid 7882] close(24) = -1 EBADF (Bad file descriptor) [pid 7882] close(25) = -1 EBADF (Bad file descriptor) [pid 7882] close(26) = -1 EBADF (Bad file descriptor) [pid 7882] close(27) = -1 EBADF (Bad file descriptor) [pid 7882] close(28) = -1 EBADF (Bad file descriptor) [pid 7882] close(29) = -1 EBADF (Bad file descriptor) [pid 7882] exit_group(0) = ? [pid 7884] <... futex resumed>) = ? [pid 7883] <... futex resumed>) = ? [pid 7884] +++ exited with 0 +++ [pid 7883] +++ exited with 0 +++ [pid 7882] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2840, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5028] umount2("./953", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./953", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./953/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./953/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./953/cgroup.cpu") = 0 [pid 5028] umount2("./953/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./953/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./953/binderfs") = 0 [pid 5028] umount2("./953/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./953/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./953/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./953/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./953/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./953/file0") = 0 [pid 5028] umount2("./953/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./953/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./953/cgroup") = 0 [pid 5028] umount2("./953/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./953/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./953/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./953") = 0 [pid 5028] mkdir("./954", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7885 attached [pid 7885] set_robust_list(0x5555563a56a0, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2843 [pid 7885] chdir("./954") = 0 [pid 7885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7885] setpgid(0, 0) = 0 [pid 7885] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7885] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7885] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7885] write(3, "1000", 4) = 4 [pid 7885] close(3) = 0 [pid 7885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7885] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7885] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7885] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7885] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7886 attached [pid 7886] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7886] set_robust_list(0x7feeffcce9a0, 24 [pid 7885] <... clone3 resumed> => {parent_tid=[2844]}, 88) = 2844 [pid 7885] rt_sigprocmask(SIG_SETMASK, [], [pid 7886] <... set_robust_list resumed>) = 0 [pid 7885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7886] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7885] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7886] memfd_create("syzkaller", 0 [pid 7885] <... futex resumed>) = 0 [pid 7886] <... memfd_create resumed>) = 3 [pid 7885] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7886] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7886] munmap(0x7feef78ae000, 2097152) = 0 [pid 7886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7886] close(3) = 0 [pid 7886] mkdir("./file0", 0777) = 0 [pid 7886] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7886] chdir("./file0") = 0 [pid 7886] ioctl(4, LOOP_CLR_FD) = 0 [pid 7886] close(4) = 0 [pid 7886] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7885] <... futex resumed>) = 0 [pid 7885] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7885] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7886] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7886] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7885] <... futex resumed>) = 0 [pid 7885] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7885] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7886] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7886] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7885] <... futex resumed>) = 0 [pid 7885] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7885] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 287.037718][ T7886] loop0: detected capacity change from 0 to 4096 [ 287.058295][ T7886] ntfs: volume version 3.1. [pid 7886] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7885] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7885] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 7885] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7885] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7885] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7887 attached [pid 7887] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7887] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7887] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7887] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7885] <... clone3 resumed> => {parent_tid=[2845]}, 88) = 2845 [pid 7885] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7885] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7887] <... futex resumed>) = 0 [pid 7885] <... futex resumed>) = 1 [pid 7887] ftruncate(4, 0 [pid 7885] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7887] <... ftruncate resumed>) = 0 [pid 7887] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7886] <... write resumed>) = 1048064 [pid 7886] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7885] <... futex resumed>) = 0 [pid 7887] <... futex resumed>) = 1 [pid 7886] <... futex resumed>) = 0 [pid 7885] close(3 [pid 7887] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7886] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7885] <... close resumed>) = 0 [pid 7885] close(4) = 0 [pid 7885] close(5) = 0 [pid 7885] close(6) = -1 EBADF (Bad file descriptor) [pid 7885] close(7) = -1 EBADF (Bad file descriptor) [pid 7885] close(8) = -1 EBADF (Bad file descriptor) [pid 7885] close(9) = -1 EBADF (Bad file descriptor) [pid 7885] close(10) = -1 EBADF (Bad file descriptor) [pid 7885] close(11) = -1 EBADF (Bad file descriptor) [pid 7885] close(12) = -1 EBADF (Bad file descriptor) [pid 7885] close(13) = -1 EBADF (Bad file descriptor) [pid 7885] close(14) = -1 EBADF (Bad file descriptor) [pid 7885] close(15) = -1 EBADF (Bad file descriptor) [pid 7885] close(16) = -1 EBADF (Bad file descriptor) [pid 7885] close(17) = -1 EBADF (Bad file descriptor) [pid 7885] close(18) = -1 EBADF (Bad file descriptor) [pid 7885] close(19) = -1 EBADF (Bad file descriptor) [pid 7885] close(20) = -1 EBADF (Bad file descriptor) [pid 7885] close(21) = -1 EBADF (Bad file descriptor) [pid 7885] close(22) = -1 EBADF (Bad file descriptor) [pid 7885] close(23) = -1 EBADF (Bad file descriptor) [pid 7885] close(24) = -1 EBADF (Bad file descriptor) [pid 7885] close(25) = -1 EBADF (Bad file descriptor) [pid 7885] close(26) = -1 EBADF (Bad file descriptor) [pid 7885] close(27) = -1 EBADF (Bad file descriptor) [pid 7885] close(28) = -1 EBADF (Bad file descriptor) [pid 7885] close(29) = -1 EBADF (Bad file descriptor) [pid 7885] exit_group(0) = ? [pid 7886] <... futex resumed>) = ? [pid 7887] <... futex resumed>) = ? [pid 7886] +++ exited with 0 +++ [pid 7887] +++ exited with 0 +++ [pid 7885] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2843, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5028] umount2("./954", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./954", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./954/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./954/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./954/cgroup.cpu") = 0 [pid 5028] umount2("./954/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./954/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./954/binderfs") = 0 [pid 5028] umount2("./954/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./954/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./954/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./954/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./954/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./954/file0") = 0 [pid 5028] umount2("./954/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./954/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./954/cgroup") = 0 [pid 5028] umount2("./954/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./954/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./954/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./954") = 0 [pid 5028] mkdir("./955", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2846 ./strace-static-x86_64: Process 7888 attached [pid 7888] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7888] chdir("./955") = 0 [pid 7888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7888] setpgid(0, 0) = 0 [pid 7888] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7888] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7888] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7888] write(3, "1000", 4) = 4 [pid 7888] close(3) = 0 [pid 7888] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7888] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7888] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7888] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7888] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7888] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7888] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7889 attached => {parent_tid=[2847]}, 88) = 2847 [pid 7889] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7889] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7889] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7889] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7888] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7888] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7889] <... futex resumed>) = 0 [pid 7888] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7889] memfd_create("syzkaller", 0) = 3 [pid 7889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7889] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7889] munmap(0x7feef78ae000, 2097152) = 0 [pid 7889] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7889] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7889] close(3) = 0 [pid 7889] mkdir("./file0", 0777) = 0 [pid 7889] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7889] chdir("./file0") = 0 [pid 7889] ioctl(4, LOOP_CLR_FD) = 0 [pid 7889] close(4) = 0 [pid 7889] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7888] <... futex resumed>) = 0 [pid 7888] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7888] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7889] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7889] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7888] <... futex resumed>) = 0 [pid 7889] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7888] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7888] <... futex resumed>) = 0 [pid 7889] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7888] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7889] <... openat resumed>) = 5 [pid 7889] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7888] <... futex resumed>) = 0 [pid 7889] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7888] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7889] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7888] <... futex resumed>) = 0 [ 287.256956][ T7889] loop0: detected capacity change from 0 to 4096 [ 287.278990][ T7889] ntfs: volume version 3.1. [pid 7888] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7888] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7888] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7888] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7888] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7890 attached [pid 7890] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7888] <... clone3 resumed> => {parent_tid=[2848]}, 88) = 2848 [pid 7890] <... rseq resumed>) = 0 [pid 7890] set_robust_list(0x7feef7aad9a0, 24 [pid 7888] rt_sigprocmask(SIG_SETMASK, [], [pid 7890] <... set_robust_list resumed>) = 0 [pid 7890] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7888] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7890] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7888] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7890] ftruncate(4, 0 [pid 7888] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7890] <... ftruncate resumed>) = 0 [pid 7889] <... write resumed>) = 1048064 [pid 7889] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7889] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7890] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7890] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7888] <... futex resumed>) = 0 [pid 7888] close(3) = 0 [pid 7888] close(4) = 0 [pid 7888] close(5) = 0 [pid 7888] close(6) = -1 EBADF (Bad file descriptor) [pid 7888] close(7) = -1 EBADF (Bad file descriptor) [pid 7888] close(8) = -1 EBADF (Bad file descriptor) [pid 7888] close(9) = -1 EBADF (Bad file descriptor) [pid 7888] close(10) = -1 EBADF (Bad file descriptor) [pid 7888] close(11) = -1 EBADF (Bad file descriptor) [pid 7888] close(12) = -1 EBADF (Bad file descriptor) [pid 7888] close(13) = -1 EBADF (Bad file descriptor) [pid 7888] close(14) = -1 EBADF (Bad file descriptor) [pid 7888] close(15) = -1 EBADF (Bad file descriptor) [pid 7888] close(16) = -1 EBADF (Bad file descriptor) [pid 7888] close(17) = -1 EBADF (Bad file descriptor) [pid 7888] close(18) = -1 EBADF (Bad file descriptor) [pid 7888] close(19) = -1 EBADF (Bad file descriptor) [pid 7888] close(20) = -1 EBADF (Bad file descriptor) [pid 7888] close(21) = -1 EBADF (Bad file descriptor) [pid 7888] close(22) = -1 EBADF (Bad file descriptor) [pid 7888] close(23) = -1 EBADF (Bad file descriptor) [pid 7888] close(24) = -1 EBADF (Bad file descriptor) [pid 7888] close(25) = -1 EBADF (Bad file descriptor) [pid 7888] close(26) = -1 EBADF (Bad file descriptor) [pid 7888] close(27) = -1 EBADF (Bad file descriptor) [pid 7888] close(28) = -1 EBADF (Bad file descriptor) [pid 7888] close(29) = -1 EBADF (Bad file descriptor) [pid 7888] exit_group(0) = ? [pid 7890] <... futex resumed>) = ? [pid 7889] <... futex resumed>) = ? [pid 7890] +++ exited with 0 +++ [pid 7889] +++ exited with 0 +++ [pid 7888] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2846, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5028] umount2("./955", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./955", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./955/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./955/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./955/cgroup.cpu") = 0 [pid 5028] umount2("./955/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./955/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./955/binderfs") = 0 [pid 5028] umount2("./955/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./955/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./955/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./955/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./955/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./955/file0") = 0 [pid 5028] umount2("./955/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./955/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./955/cgroup") = 0 [pid 5028] umount2("./955/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./955/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./955/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./955") = 0 [pid 5028] mkdir("./956", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7891 attached [pid 7891] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2849 [pid 7891] <... set_robust_list resumed>) = 0 [pid 7891] chdir("./956") = 0 [pid 7891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7891] setpgid(0, 0) = 0 [pid 7891] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7891] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7891] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7891] write(3, "1000", 4) = 4 [pid 7891] close(3) = 0 [pid 7891] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7891] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7891] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7891] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7891] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7891] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2850]}, 88) = 2850 ./strace-static-x86_64: Process 7892 attached [pid 7891] rt_sigprocmask(SIG_SETMASK, [], [pid 7892] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7891] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7891] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7892] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7892] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7892] memfd_create("syzkaller", 0) = 3 [pid 7892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7892] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7892] munmap(0x7feef78ae000, 2097152) = 0 [pid 7892] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7892] close(3) = 0 [pid 7892] mkdir("./file0", 0777) = 0 [pid 7892] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7892] chdir("./file0") = 0 [pid 7892] ioctl(4, LOOP_CLR_FD) = 0 [pid 7892] close(4) = 0 [pid 7892] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7892] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7891] <... futex resumed>) = 0 [pid 7892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7891] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7892] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7891] <... futex resumed>) = 0 [pid 7891] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7892] <... openat resumed>) = 4 [pid 7892] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7891] <... futex resumed>) = 0 [pid 7892] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7891] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7891] <... futex resumed>) = 0 [pid 7892] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7891] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7892] <... openat resumed>) = 5 [pid 7892] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7892] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7891] <... futex resumed>) = 0 [pid 7892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7891] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7892] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7891] <... futex resumed>) = 0 [ 287.488861][ T7892] loop0: detected capacity change from 0 to 4096 [ 287.508365][ T7892] ntfs: volume version 3.1. [pid 7891] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7891] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7891] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7891] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7893 attached => {parent_tid=[2851]}, 88) = 2851 [pid 7891] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7891] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7891] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7893] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7893] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7893] ftruncate(4, 0) = 0 [pid 7892] <... write resumed>) = 1048064 [pid 7893] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7892] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7893] <... futex resumed>) = 1 [pid 7891] <... futex resumed>) = 0 [pid 7891] close(3 [pid 7893] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7891] <... close resumed>) = 0 [pid 7891] close(4) = 0 [pid 7891] close(5) = 0 [pid 7891] close(6) = -1 EBADF (Bad file descriptor) [pid 7891] close(7) = -1 EBADF (Bad file descriptor) [pid 7891] close(8) = -1 EBADF (Bad file descriptor) [pid 7891] close(9) = -1 EBADF (Bad file descriptor) [pid 7891] close(10) = -1 EBADF (Bad file descriptor) [pid 7891] close(11 [pid 7892] <... futex resumed>) = 0 [pid 7892] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 7891] close(12) = -1 EBADF (Bad file descriptor) [pid 7891] close(13) = -1 EBADF (Bad file descriptor) [pid 7891] close(14) = -1 EBADF (Bad file descriptor) [pid 7891] close(15) = -1 EBADF (Bad file descriptor) [pid 7891] close(16) = -1 EBADF (Bad file descriptor) [pid 7891] close(17) = -1 EBADF (Bad file descriptor) [pid 7891] close(18) = -1 EBADF (Bad file descriptor) [pid 7891] close(19) = -1 EBADF (Bad file descriptor) [pid 7891] close(20) = -1 EBADF (Bad file descriptor) [pid 7891] close(21) = -1 EBADF (Bad file descriptor) [pid 7891] close(22) = -1 EBADF (Bad file descriptor) [pid 7891] close(23) = -1 EBADF (Bad file descriptor) [pid 7891] close(24) = -1 EBADF (Bad file descriptor) [pid 7891] close(25) = -1 EBADF (Bad file descriptor) [pid 7891] close(26) = -1 EBADF (Bad file descriptor) [pid 7891] close(27) = -1 EBADF (Bad file descriptor) [pid 7891] close(28) = -1 EBADF (Bad file descriptor) [pid 7891] close(29) = -1 EBADF (Bad file descriptor) [pid 7891] exit_group(0 [pid 7893] <... futex resumed>) = ? [pid 7892] <... futex resumed>) = ? [pid 7893] +++ exited with 0 +++ [pid 7891] <... exit_group resumed>) = ? [pid 7892] +++ exited with 0 +++ [pid 7891] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2849, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./956", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./956", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./956/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./956/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./956/cgroup.cpu") = 0 [pid 5028] umount2("./956/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./956/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./956/binderfs") = 0 [pid 5028] umount2("./956/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./956/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./956/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./956/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./956/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./956/file0") = 0 [pid 5028] umount2("./956/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./956/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./956/cgroup") = 0 [pid 5028] umount2("./956/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./956/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./956/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./956") = 0 [pid 5028] mkdir("./957", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2852 ./strace-static-x86_64: Process 7894 attached [pid 7894] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7894] chdir("./957") = 0 [pid 7894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7894] setpgid(0, 0) = 0 [pid 7894] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7894] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7894] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7894] write(3, "1000", 4) = 4 [pid 7894] close(3) = 0 [pid 7894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7894] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7894] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7894] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7894] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7894] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7895 attached [pid 7895] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7894] <... clone3 resumed> => {parent_tid=[2853]}, 88) = 2853 [pid 7895] set_robust_list(0x7feeffcce9a0, 24 [pid 7894] rt_sigprocmask(SIG_SETMASK, [], [pid 7895] <... set_robust_list resumed>) = 0 [pid 7894] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7895] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7894] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7895] memfd_create("syzkaller", 0 [pid 7894] <... futex resumed>) = 0 [pid 7894] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7895] <... memfd_create resumed>) = 3 [pid 7895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7895] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7895] munmap(0x7feef78ae000, 2097152) = 0 [pid 7895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7895] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7895] close(3) = 0 [pid 7895] mkdir("./file0", 0777) = 0 [pid 7895] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7895] chdir("./file0") = 0 [pid 7895] ioctl(4, LOOP_CLR_FD) = 0 [pid 7895] close(4) = 0 [pid 7895] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7894] <... futex resumed>) = 0 [pid 7895] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7894] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7895] <... openat resumed>) = 4 [pid 7895] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7894] <... futex resumed>) = 0 [pid 7894] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7895] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7895] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7894] <... futex resumed>) = 0 [pid 7894] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7895] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 287.746340][ T7895] loop0: detected capacity change from 0 to 4096 [ 287.768361][ T7895] ntfs: volume version 3.1. [pid 7894] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7894] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7894] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7894] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7894] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7896 attached => {parent_tid=[2854]}, 88) = 2854 [pid 7894] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7894] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7894] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7896] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7896] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7896] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7896] ftruncate(4, 0) = 0 [pid 7896] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7895] <... write resumed>) = 1048064 [pid 7894] <... futex resumed>) = 0 [pid 7896] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7895] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7894] close(3 [pid 7895] <... futex resumed>) = 0 [pid 7894] <... close resumed>) = 0 [pid 7895] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7894] close(4) = 0 [pid 7894] close(5) = 0 [pid 7894] close(6) = -1 EBADF (Bad file descriptor) [pid 7894] close(7) = -1 EBADF (Bad file descriptor) [pid 7894] close(8) = -1 EBADF (Bad file descriptor) [pid 7894] close(9) = -1 EBADF (Bad file descriptor) [pid 7894] close(10) = -1 EBADF (Bad file descriptor) [pid 7894] close(11) = -1 EBADF (Bad file descriptor) [pid 7894] close(12) = -1 EBADF (Bad file descriptor) [pid 7894] close(13) = -1 EBADF (Bad file descriptor) [pid 7894] close(14) = -1 EBADF (Bad file descriptor) [pid 7894] close(15) = -1 EBADF (Bad file descriptor) [pid 7894] close(16) = -1 EBADF (Bad file descriptor) [pid 7894] close(17) = -1 EBADF (Bad file descriptor) [pid 7894] close(18) = -1 EBADF (Bad file descriptor) [pid 7894] close(19) = -1 EBADF (Bad file descriptor) [pid 7894] close(20) = -1 EBADF (Bad file descriptor) [pid 7894] close(21) = -1 EBADF (Bad file descriptor) [pid 7894] close(22) = -1 EBADF (Bad file descriptor) [pid 7894] close(23) = -1 EBADF (Bad file descriptor) [pid 7894] close(24) = -1 EBADF (Bad file descriptor) [pid 7894] close(25) = -1 EBADF (Bad file descriptor) [pid 7894] close(26) = -1 EBADF (Bad file descriptor) [pid 7894] close(27) = -1 EBADF (Bad file descriptor) [pid 7894] close(28) = -1 EBADF (Bad file descriptor) [pid 7894] close(29) = -1 EBADF (Bad file descriptor) [pid 7894] exit_group(0) = ? [pid 7895] <... futex resumed>) = ? [pid 7896] <... futex resumed>) = ? [pid 7895] +++ exited with 0 +++ [pid 7896] +++ exited with 0 +++ [pid 7894] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2852, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./957", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./957", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./957/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./957/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./957/cgroup.cpu") = 0 [pid 5028] umount2("./957/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./957/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./957/binderfs") = 0 [pid 5028] umount2("./957/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./957/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./957/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./957/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./957/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./957/file0") = 0 [pid 5028] umount2("./957/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./957/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./957/cgroup") = 0 [pid 5028] umount2("./957/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./957/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./957/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./957") = 0 [pid 5028] mkdir("./958", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7897 attached , child_tidptr=0x5555563a5690) = 2855 [pid 7897] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7897] chdir("./958") = 0 [pid 7897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7897] setpgid(0, 0) = 0 [pid 7897] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7897] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7897] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7897] write(3, "1000", 4) = 4 [pid 7897] close(3) = 0 [pid 7897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7897] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7897] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7897] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7897] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7897] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7897] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7898 attached => {parent_tid=[2856]}, 88) = 2856 [pid 7898] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7897] rt_sigprocmask(SIG_SETMASK, [], [pid 7898] <... rseq resumed>) = 0 [pid 7897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7897] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7898] set_robust_list(0x7feeffcce9a0, 24 [pid 7897] <... futex resumed>) = 0 [pid 7898] <... set_robust_list resumed>) = 0 [pid 7897] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7898] memfd_create("syzkaller", 0) = 3 [pid 7898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7898] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7898] munmap(0x7feef78ae000, 2097152) = 0 [pid 7898] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7898] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7898] close(3) = 0 [pid 7898] mkdir("./file0", 0777) = 0 [ 287.965097][ T7898] loop0: detected capacity change from 0 to 4096 [ 287.974140][ T7898] __ntfs_warning: 11 callbacks suppressed [ 287.974154][ T7898] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 288.010963][ T7898] ntfs: volume version 3.1. [pid 7898] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7898] chdir("./file0") = 0 [pid 7898] ioctl(4, LOOP_CLR_FD) = 0 [pid 7898] close(4) = 0 [pid 7898] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7898] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7897] <... futex resumed>) = 0 [pid 7897] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7898] <... futex resumed>) = 0 [pid 7898] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7897] <... futex resumed>) = 1 [pid 7897] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7898] <... openat resumed>) = 4 [pid 7898] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7897] <... futex resumed>) = 0 [pid 7897] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7897] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7898] <... futex resumed>) = 1 [pid 7898] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7898] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7897] <... futex resumed>) = 0 [pid 7897] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7897] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7898] <... futex resumed>) = 1 [pid 7898] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7897] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7897] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7897] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7897] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7897] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7899 attached => {parent_tid=[2857]}, 88) = 2857 [pid 7899] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7897] rt_sigprocmask(SIG_SETMASK, [], [pid 7899] <... rseq resumed>) = 0 [pid 7897] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7899] set_robust_list(0x7feef7aad9a0, 24 [pid 7897] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7899] <... set_robust_list resumed>) = 0 [pid 7897] <... futex resumed>) = 0 [pid 7899] rt_sigprocmask(SIG_SETMASK, [], [pid 7897] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7899] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7899] ftruncate(4, 0) = 0 [pid 7899] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7898] <... write resumed>) = 1048064 [pid 7898] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7899] <... futex resumed>) = 1 [pid 7898] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7897] <... futex resumed>) = 0 [pid 7899] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7897] close(3) = 0 [pid 7897] close(4) = 0 [pid 7897] close(5) = 0 [pid 7897] close(6) = -1 EBADF (Bad file descriptor) [pid 7897] close(7) = -1 EBADF (Bad file descriptor) [pid 7897] close(8) = -1 EBADF (Bad file descriptor) [pid 7897] close(9) = -1 EBADF (Bad file descriptor) [pid 7897] close(10) = -1 EBADF (Bad file descriptor) [pid 7897] close(11) = -1 EBADF (Bad file descriptor) [pid 7897] close(12) = -1 EBADF (Bad file descriptor) [pid 7897] close(13) = -1 EBADF (Bad file descriptor) [pid 7897] close(14) = -1 EBADF (Bad file descriptor) [pid 7897] close(15) = -1 EBADF (Bad file descriptor) [pid 7897] close(16) = -1 EBADF (Bad file descriptor) [pid 7897] close(17) = -1 EBADF (Bad file descriptor) [pid 7897] close(18) = -1 EBADF (Bad file descriptor) [pid 7897] close(19) = -1 EBADF (Bad file descriptor) [pid 7897] close(20) = -1 EBADF (Bad file descriptor) [pid 7897] close(21) = -1 EBADF (Bad file descriptor) [pid 7897] close(22) = -1 EBADF (Bad file descriptor) [pid 7897] close(23) = -1 EBADF (Bad file descriptor) [pid 7897] close(24) = -1 EBADF (Bad file descriptor) [pid 7897] close(25) = -1 EBADF (Bad file descriptor) [pid 7897] close(26) = -1 EBADF (Bad file descriptor) [pid 7897] close(27) = -1 EBADF (Bad file descriptor) [pid 7897] close(28) = -1 EBADF (Bad file descriptor) [pid 7897] close(29) = -1 EBADF (Bad file descriptor) [pid 7897] exit_group(0) = ? [pid 7899] <... futex resumed>) = ? [pid 7898] <... futex resumed>) = ? [pid 7899] +++ exited with 0 +++ [pid 7898] +++ exited with 0 +++ [pid 7897] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2855, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./958", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./958", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./958/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./958/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./958/cgroup.cpu") = 0 [pid 5028] umount2("./958/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./958/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./958/binderfs") = 0 [pid 5028] umount2("./958/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./958/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./958/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./958/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./958/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./958/file0") = 0 [pid 5028] umount2("./958/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./958/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./958/cgroup") = 0 [pid 5028] umount2("./958/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./958/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./958/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./958") = 0 [pid 5028] mkdir("./959", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7900 attached , child_tidptr=0x5555563a5690) = 2858 [pid 7900] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7900] chdir("./959") = 0 [pid 7900] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7900] setpgid(0, 0) = 0 [pid 7900] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7900] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7900] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7900] write(3, "1000", 4) = 4 [pid 7900] close(3) = 0 [pid 7900] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7900] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7900] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7900] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7900] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7900] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7900] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7901 attached [pid 7901] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7900] <... clone3 resumed> => {parent_tid=[2859]}, 88) = 2859 [pid 7901] <... rseq resumed>) = 0 [pid 7900] rt_sigprocmask(SIG_SETMASK, [], [pid 7901] set_robust_list(0x7feeffcce9a0, 24 [pid 7900] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7901] <... set_robust_list resumed>) = 0 [pid 7901] rt_sigprocmask(SIG_SETMASK, [], [pid 7900] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7900] <... futex resumed>) = 0 [pid 7900] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7901] memfd_create("syzkaller", 0) = 3 [pid 7901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7901] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7901] munmap(0x7feef78ae000, 2097152) = 0 [pid 7901] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7901] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7901] close(3) = 0 [pid 7901] mkdir("./file0", 0777) = 0 [pid 7901] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7901] chdir("./file0") = 0 [pid 7901] ioctl(4, LOOP_CLR_FD) = 0 [pid 7901] close(4) = 0 [pid 7901] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7901] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7900] <... futex resumed>) = 0 [pid 7900] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7901] <... futex resumed>) = 0 [pid 7901] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7900] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7901] <... openat resumed>) = 4 [pid 7901] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7900] <... futex resumed>) = 0 [pid 7900] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7900] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7901] <... futex resumed>) = 1 [pid 7901] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7901] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7900] <... futex resumed>) = 0 [pid 7900] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] <... futex resumed>) = 1 [pid 7900] <... futex resumed>) = 0 [pid 7900] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 288.226444][ T7901] loop0: detected capacity change from 0 to 4096 [ 288.235938][ T7901] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 288.269187][ T7901] ntfs: volume version 3.1. [pid 7901] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7900] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7900] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7900] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7900] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7900] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7902 attached => {parent_tid=[2860]}, 88) = 2860 [pid 7902] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7900] rt_sigprocmask(SIG_SETMASK, [], [pid 7902] <... rseq resumed>) = 0 [pid 7900] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7902] set_robust_list(0x7feef7aad9a0, 24 [pid 7900] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7902] <... set_robust_list resumed>) = 0 [pid 7902] rt_sigprocmask(SIG_SETMASK, [], [pid 7900] <... futex resumed>) = 0 [pid 7902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7900] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7902] ftruncate(4, 0) = 0 [pid 7902] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7901] <... write resumed>) = 1048064 [pid 7902] <... futex resumed>) = 1 [pid 7901] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7902] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7901] <... futex resumed>) = 0 [pid 7900] <... futex resumed>) = 0 [pid 7901] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7900] close(3) = 0 [pid 7900] close(4) = 0 [pid 7900] close(5) = 0 [pid 7900] close(6) = -1 EBADF (Bad file descriptor) [pid 7900] close(7) = -1 EBADF (Bad file descriptor) [pid 7900] close(8) = -1 EBADF (Bad file descriptor) [pid 7900] close(9) = -1 EBADF (Bad file descriptor) [pid 7900] close(10) = -1 EBADF (Bad file descriptor) [pid 7900] close(11) = -1 EBADF (Bad file descriptor) [pid 7900] close(12) = -1 EBADF (Bad file descriptor) [pid 7900] close(13) = -1 EBADF (Bad file descriptor) [pid 7900] close(14) = -1 EBADF (Bad file descriptor) [pid 7900] close(15) = -1 EBADF (Bad file descriptor) [pid 7900] close(16) = -1 EBADF (Bad file descriptor) [pid 7900] close(17) = -1 EBADF (Bad file descriptor) [pid 7900] close(18) = -1 EBADF (Bad file descriptor) [pid 7900] close(19) = -1 EBADF (Bad file descriptor) [pid 7900] close(20) = -1 EBADF (Bad file descriptor) [pid 7900] close(21) = -1 EBADF (Bad file descriptor) [pid 7900] close(22) = -1 EBADF (Bad file descriptor) [pid 7900] close(23) = -1 EBADF (Bad file descriptor) [pid 7900] close(24) = -1 EBADF (Bad file descriptor) [pid 7900] close(25) = -1 EBADF (Bad file descriptor) [pid 7900] close(26) = -1 EBADF (Bad file descriptor) [pid 7900] close(27) = -1 EBADF (Bad file descriptor) [pid 7900] close(28) = -1 EBADF (Bad file descriptor) [pid 7900] close(29) = -1 EBADF (Bad file descriptor) [pid 7900] exit_group(0) = ? [pid 7901] <... futex resumed>) = ? [pid 7902] <... futex resumed>) = ? [pid 7901] +++ exited with 0 +++ [pid 7902] +++ exited with 0 +++ [pid 7900] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2858, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./959", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./959", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./959/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./959/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./959/cgroup.cpu") = 0 [pid 5028] umount2("./959/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./959/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./959/binderfs") = 0 [pid 5028] umount2("./959/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./959/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./959/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./959/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./959/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./959/file0") = 0 [pid 5028] umount2("./959/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./959/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./959/cgroup") = 0 [pid 5028] umount2("./959/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./959/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./959/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./959") = 0 [pid 5028] mkdir("./960", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7903 attached , child_tidptr=0x5555563a5690) = 2861 [pid 7903] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7903] chdir("./960") = 0 [pid 7903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7903] setpgid(0, 0) = 0 [pid 7903] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7903] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7903] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7903] write(3, "1000", 4) = 4 [pid 7903] close(3) = 0 [pid 7903] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7903] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7903] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7903] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7903] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7903] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7903] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7904 attached [pid 7904] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7903] <... clone3 resumed> => {parent_tid=[2862]}, 88) = 2862 [pid 7903] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7904] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7904] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7904] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7903] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7904] <... futex resumed>) = 0 [pid 7903] <... futex resumed>) = 1 [pid 7904] memfd_create("syzkaller", 0 [pid 7903] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7904] <... memfd_create resumed>) = 3 [pid 7904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7904] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7904] munmap(0x7feef78ae000, 2097152) = 0 [pid 7904] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7904] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7904] close(3) = 0 [pid 7904] mkdir("./file0", 0777) = 0 [pid 7904] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7904] chdir("./file0") = 0 [pid 7904] ioctl(4, LOOP_CLR_FD) = 0 [pid 7904] close(4) = 0 [pid 7904] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7903] <... futex resumed>) = 0 [pid 7903] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7904] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7903] <... futex resumed>) = 0 [pid 7903] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7904] <... openat resumed>) = 4 [pid 7904] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] <... futex resumed>) = 0 [pid 7903] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7904] <... futex resumed>) = 1 [pid 7903] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7904] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7904] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7903] <... futex resumed>) = 0 [pid 7904] <... futex resumed>) = 1 [pid 7903] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7904] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7903] <... futex resumed>) = 0 [ 288.479177][ T7904] loop0: detected capacity change from 0 to 4096 [ 288.488057][ T7904] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 288.520275][ T7904] ntfs: volume version 3.1. [pid 7903] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7903] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7903] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7903] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7903] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7905 attached => {parent_tid=[2863]}, 88) = 2863 [pid 7905] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7903] rt_sigprocmask(SIG_SETMASK, [], [pid 7905] <... rseq resumed>) = 0 [pid 7903] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7905] set_robust_list(0x7feef7aad9a0, 24 [pid 7903] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7905] <... set_robust_list resumed>) = 0 [pid 7903] <... futex resumed>) = 0 [pid 7905] rt_sigprocmask(SIG_SETMASK, [], [pid 7903] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7905] ftruncate(4, 0) = 0 [pid 7905] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7904] <... write resumed>) = 1048064 [pid 7904] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7905] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7904] <... futex resumed>) = 0 [pid 7904] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7903] <... futex resumed>) = 0 [pid 7903] close(3) = 0 [pid 7903] close(4) = 0 [pid 7903] close(5) = 0 [pid 7903] close(6) = -1 EBADF (Bad file descriptor) [pid 7903] close(7) = -1 EBADF (Bad file descriptor) [pid 7903] close(8) = -1 EBADF (Bad file descriptor) [pid 7903] close(9) = -1 EBADF (Bad file descriptor) [pid 7903] close(10) = -1 EBADF (Bad file descriptor) [pid 7903] close(11) = -1 EBADF (Bad file descriptor) [pid 7903] close(12) = -1 EBADF (Bad file descriptor) [pid 7903] close(13) = -1 EBADF (Bad file descriptor) [pid 7903] close(14) = -1 EBADF (Bad file descriptor) [pid 7903] close(15) = -1 EBADF (Bad file descriptor) [pid 7903] close(16) = -1 EBADF (Bad file descriptor) [pid 7903] close(17) = -1 EBADF (Bad file descriptor) [pid 7903] close(18) = -1 EBADF (Bad file descriptor) [pid 7903] close(19) = -1 EBADF (Bad file descriptor) [pid 7903] close(20) = -1 EBADF (Bad file descriptor) [pid 7903] close(21) = -1 EBADF (Bad file descriptor) [pid 7903] close(22) = -1 EBADF (Bad file descriptor) [pid 7903] close(23) = -1 EBADF (Bad file descriptor) [pid 7903] close(24) = -1 EBADF (Bad file descriptor) [pid 7903] close(25) = -1 EBADF (Bad file descriptor) [pid 7903] close(26) = -1 EBADF (Bad file descriptor) [pid 7903] close(27) = -1 EBADF (Bad file descriptor) [pid 7903] close(28) = -1 EBADF (Bad file descriptor) [pid 7903] close(29) = -1 EBADF (Bad file descriptor) [pid 7903] exit_group(0 [pid 7905] <... futex resumed>) = ? [pid 7904] <... futex resumed>) = ? [pid 7904] +++ exited with 0 +++ [pid 7903] <... exit_group resumed>) = ? [pid 7905] +++ exited with 0 +++ [pid 7903] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2861, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5028] umount2("./960", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./960", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./960/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./960/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./960/cgroup.cpu") = 0 [pid 5028] umount2("./960/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./960/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./960/binderfs") = 0 [pid 5028] umount2("./960/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./960/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./960/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./960/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./960/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./960/file0") = 0 [pid 5028] umount2("./960/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./960/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./960/cgroup") = 0 [pid 5028] umount2("./960/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./960/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./960/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./960") = 0 [pid 5028] mkdir("./961", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2864 ./strace-static-x86_64: Process 7906 attached [pid 7906] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7906] chdir("./961") = 0 [pid 7906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7906] setpgid(0, 0) = 0 [pid 7906] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7906] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7906] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7906] write(3, "1000", 4) = 4 [pid 7906] close(3) = 0 [pid 7906] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7906] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7906] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7906] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7906] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7906] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7906] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7906] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7907 attached => {parent_tid=[2865]}, 88) = 2865 [pid 7907] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7906] rt_sigprocmask(SIG_SETMASK, [], [pid 7907] <... rseq resumed>) = 0 [pid 7906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7907] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7906] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7907] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7906] <... futex resumed>) = 0 [pid 7906] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7907] memfd_create("syzkaller", 0) = 3 [pid 7907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7907] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7907] munmap(0x7feef78ae000, 2097152) = 0 [pid 7907] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7907] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7907] close(3) = 0 [pid 7907] mkdir("./file0", 0777) = 0 [pid 7907] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7907] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7907] chdir("./file0") = 0 [pid 7907] ioctl(4, LOOP_CLR_FD) = 0 [pid 7907] close(4) = 0 [pid 7907] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7907] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7906] <... futex resumed>) = 0 [pid 7906] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7907] <... futex resumed>) = 0 [pid 7906] <... futex resumed>) = 1 [pid 7907] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7906] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7907] <... openat resumed>) = 4 [pid 7907] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7907] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7906] <... futex resumed>) = 0 [pid 7906] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7907] <... futex resumed>) = 0 [pid 7906] <... futex resumed>) = 1 [pid 7907] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7906] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7907] <... openat resumed>) = 5 [pid 7907] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7906] <... futex resumed>) = 0 [pid 7907] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7906] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 288.757330][ T7907] loop0: detected capacity change from 0 to 4096 [ 288.766773][ T7907] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 288.798019][ T7907] ntfs: volume version 3.1. [pid 7906] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7906] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7906] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7906] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7906] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7906] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7908 attached => {parent_tid=[2866]}, 88) = 2866 [pid 7908] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7906] rt_sigprocmask(SIG_SETMASK, [], [pid 7908] <... rseq resumed>) = 0 [pid 7906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7908] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7906] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7906] <... futex resumed>) = 0 [pid 7908] ftruncate(4, 0 [pid 7906] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7908] <... ftruncate resumed>) = 0 [pid 7908] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7906] <... futex resumed>) = 0 [pid 7907] <... write resumed>) = 1048064 [pid 7908] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7907] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7907] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7906] close(3) = 0 [pid 7906] close(4) = 0 [pid 7906] close(5) = 0 [pid 7906] close(6) = -1 EBADF (Bad file descriptor) [pid 7906] close(7) = -1 EBADF (Bad file descriptor) [pid 7906] close(8) = -1 EBADF (Bad file descriptor) [pid 7906] close(9) = -1 EBADF (Bad file descriptor) [pid 7906] close(10) = -1 EBADF (Bad file descriptor) [pid 7906] close(11) = -1 EBADF (Bad file descriptor) [pid 7906] close(12) = -1 EBADF (Bad file descriptor) [pid 7906] close(13) = -1 EBADF (Bad file descriptor) [pid 7906] close(14) = -1 EBADF (Bad file descriptor) [pid 7906] close(15) = -1 EBADF (Bad file descriptor) [pid 7906] close(16) = -1 EBADF (Bad file descriptor) [pid 7906] close(17) = -1 EBADF (Bad file descriptor) [pid 7906] close(18) = -1 EBADF (Bad file descriptor) [pid 7906] close(19) = -1 EBADF (Bad file descriptor) [pid 7906] close(20) = -1 EBADF (Bad file descriptor) [pid 7906] close(21) = -1 EBADF (Bad file descriptor) [pid 7906] close(22) = -1 EBADF (Bad file descriptor) [pid 7906] close(23) = -1 EBADF (Bad file descriptor) [pid 7906] close(24) = -1 EBADF (Bad file descriptor) [pid 7906] close(25) = -1 EBADF (Bad file descriptor) [pid 7906] close(26) = -1 EBADF (Bad file descriptor) [pid 7906] close(27) = -1 EBADF (Bad file descriptor) [pid 7906] close(28) = -1 EBADF (Bad file descriptor) [pid 7906] close(29) = -1 EBADF (Bad file descriptor) [pid 7906] exit_group(0) = ? [pid 7907] <... futex resumed>) = ? [pid 7908] <... futex resumed>) = ? [pid 7907] +++ exited with 0 +++ [pid 7908] +++ exited with 0 +++ [pid 7906] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2864, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5028] umount2("./961", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./961", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./961/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./961/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./961/cgroup.cpu") = 0 [pid 5028] umount2("./961/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./961/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./961/binderfs") = 0 [pid 5028] umount2("./961/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./961/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./961/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./961/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./961/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./961/file0") = 0 [pid 5028] umount2("./961/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./961/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./961/cgroup") = 0 [pid 5028] umount2("./961/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./961/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./961/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./961") = 0 [pid 5028] mkdir("./962", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7909 attached [pid 7909] set_robust_list(0x5555563a56a0, 24) = 0 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2867 [pid 7909] chdir("./962") = 0 [pid 7909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7909] setpgid(0, 0) = 0 [pid 7909] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7909] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7909] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7909] write(3, "1000", 4) = 4 [pid 7909] close(3) = 0 [pid 7909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7909] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7909] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7909] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7909] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7909] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7909] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7910 attached [pid 7910] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7909] <... clone3 resumed> => {parent_tid=[2868]}, 88) = 2868 [pid 7910] <... rseq resumed>) = 0 [pid 7910] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7910] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7910] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7909] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7909] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7910] <... futex resumed>) = 0 [pid 7909] <... futex resumed>) = 1 [pid 7910] memfd_create("syzkaller", 0 [pid 7909] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7910] <... memfd_create resumed>) = 3 [pid 7910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7910] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7910] munmap(0x7feef78ae000, 2097152) = 0 [pid 7910] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7910] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7910] close(3) = 0 [pid 7910] mkdir("./file0", 0777) = 0 [pid 7910] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7910] chdir("./file0") = 0 [pid 7910] ioctl(4, LOOP_CLR_FD) = 0 [pid 7910] close(4) = 0 [pid 7910] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7909] <... futex resumed>) = 0 [pid 7909] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7910] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7909] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7910] <... openat resumed>) = 4 [pid 7910] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7909] <... futex resumed>) = 0 [pid 7910] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7909] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7909] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7910] <... openat resumed>) = 5 [pid 7910] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7909] <... futex resumed>) = 0 [pid 7910] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7909] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 289.013591][ T7910] loop0: detected capacity change from 0 to 4096 [ 289.022963][ T7910] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 289.056582][ T7910] ntfs: volume version 3.1. [pid 7909] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7909] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7909] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7909] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7909] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7911 attached [pid 7911] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7909] <... clone3 resumed> => {parent_tid=[2869]}, 88) = 2869 [pid 7911] <... rseq resumed>) = 0 [pid 7909] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7911] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7909] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7911] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7909] <... futex resumed>) = 0 [pid 7911] ftruncate(4, 0 [pid 7909] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7911] <... ftruncate resumed>) = 0 [pid 7911] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7910] <... write resumed>) = 1048064 [pid 7909] <... futex resumed>) = 0 [pid 7911] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7910] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7909] close(3 [pid 7910] <... futex resumed>) = 0 [pid 7909] <... close resumed>) = 0 [pid 7910] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7909] close(4) = 0 [pid 7909] close(5) = 0 [pid 7909] close(6) = -1 EBADF (Bad file descriptor) [pid 7909] close(7) = -1 EBADF (Bad file descriptor) [pid 7909] close(8) = -1 EBADF (Bad file descriptor) [pid 7909] close(9) = -1 EBADF (Bad file descriptor) [pid 7909] close(10) = -1 EBADF (Bad file descriptor) [pid 7909] close(11) = -1 EBADF (Bad file descriptor) [pid 7909] close(12) = -1 EBADF (Bad file descriptor) [pid 7909] close(13) = -1 EBADF (Bad file descriptor) [pid 7909] close(14) = -1 EBADF (Bad file descriptor) [pid 7909] close(15) = -1 EBADF (Bad file descriptor) [pid 7909] close(16) = -1 EBADF (Bad file descriptor) [pid 7909] close(17) = -1 EBADF (Bad file descriptor) [pid 7909] close(18) = -1 EBADF (Bad file descriptor) [pid 7909] close(19) = -1 EBADF (Bad file descriptor) [pid 7909] close(20) = -1 EBADF (Bad file descriptor) [pid 7909] close(21) = -1 EBADF (Bad file descriptor) [pid 7909] close(22) = -1 EBADF (Bad file descriptor) [pid 7909] close(23) = -1 EBADF (Bad file descriptor) [pid 7909] close(24) = -1 EBADF (Bad file descriptor) [pid 7909] close(25) = -1 EBADF (Bad file descriptor) [pid 7909] close(26) = -1 EBADF (Bad file descriptor) [pid 7909] close(27) = -1 EBADF (Bad file descriptor) [pid 7909] close(28) = -1 EBADF (Bad file descriptor) [pid 7909] close(29) = -1 EBADF (Bad file descriptor) [pid 7909] exit_group(0 [pid 7911] <... futex resumed>) = ? [pid 7909] <... exit_group resumed>) = ? [pid 7910] <... futex resumed>) = ? [pid 7911] +++ exited with 0 +++ [pid 7910] +++ exited with 0 +++ [pid 7909] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2867, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5028] umount2("./962", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./962", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./962/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./962/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./962/cgroup.cpu") = 0 [pid 5028] umount2("./962/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./962/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./962/binderfs") = 0 [pid 5028] umount2("./962/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./962/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./962/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./962/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./962/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./962/file0") = 0 [pid 5028] umount2("./962/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./962/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./962/cgroup") = 0 [pid 5028] umount2("./962/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./962/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./962/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./962") = 0 [pid 5028] mkdir("./963", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7912 attached [pid 7912] set_robust_list(0x5555563a56a0, 24 [pid 5028] <... clone resumed>, child_tidptr=0x5555563a5690) = 2870 [pid 7912] <... set_robust_list resumed>) = 0 [pid 7912] chdir("./963") = 0 [pid 7912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7912] setpgid(0, 0) = 0 [pid 7912] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7912] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7912] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7912] write(3, "1000", 4) = 4 [pid 7912] close(3) = 0 [pid 7912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7912] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7912] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7912] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7912] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7912] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2871]}, 88) = 2871 [pid 7912] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 7913 attached [pid 7912] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7912] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7913] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7913] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7913] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7913] memfd_create("syzkaller", 0) = 3 [pid 7913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7913] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7913] munmap(0x7feef78ae000, 2097152) = 0 [pid 7913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7913] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7913] close(3) = 0 [pid 7913] mkdir("./file0", 0777) = 0 [pid 7913] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7913] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7913] chdir("./file0") = 0 [pid 7913] ioctl(4, LOOP_CLR_FD) = 0 [pid 7913] close(4) = 0 [pid 7913] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7912] <... futex resumed>) = 0 [pid 7913] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7912] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7913] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7912] <... futex resumed>) = 0 [pid 7912] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7913] <... openat resumed>) = 4 [pid 7913] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7912] <... futex resumed>) = 0 [pid 7913] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7912] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7912] <... futex resumed>) = 0 [pid 7913] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7912] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7913] <... openat resumed>) = 5 [pid 7913] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7912] <... futex resumed>) = 0 [pid 7913] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7912] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7913] <... futex resumed>) = 0 [pid 7912] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 289.254383][ T7913] loop0: detected capacity change from 0 to 4096 [ 289.263899][ T7913] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 289.295285][ T7913] ntfs: volume version 3.1. [pid 7913] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7912] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7912] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7912] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7912] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7914 attached [pid 7914] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7912] <... clone3 resumed> => {parent_tid=[2872]}, 88) = 2872 [pid 7914] <... rseq resumed>) = 0 [pid 7912] rt_sigprocmask(SIG_SETMASK, [], [pid 7914] set_robust_list(0x7feef7aad9a0, 24 [pid 7912] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7914] <... set_robust_list resumed>) = 0 [pid 7914] rt_sigprocmask(SIG_SETMASK, [], [pid 7912] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7914] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7914] ftruncate(4, 0 [pid 7912] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7914] <... ftruncate resumed>) = 0 [pid 7913] <... write resumed>) = 1048064 [pid 7914] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7913] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7914] <... futex resumed>) = 1 [pid 7912] <... futex resumed>) = 0 [pid 7914] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7913] <... futex resumed>) = 0 [pid 7912] close(3 [pid 7913] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7912] <... close resumed>) = 0 [pid 7912] close(4) = 0 [pid 7912] close(5) = 0 [pid 7912] close(6) = -1 EBADF (Bad file descriptor) [pid 7912] close(7) = -1 EBADF (Bad file descriptor) [pid 7912] close(8) = -1 EBADF (Bad file descriptor) [pid 7912] close(9) = -1 EBADF (Bad file descriptor) [pid 7912] close(10) = -1 EBADF (Bad file descriptor) [pid 7912] close(11) = -1 EBADF (Bad file descriptor) [pid 7912] close(12) = -1 EBADF (Bad file descriptor) [pid 7912] close(13) = -1 EBADF (Bad file descriptor) [pid 7912] close(14) = -1 EBADF (Bad file descriptor) [pid 7912] close(15) = -1 EBADF (Bad file descriptor) [pid 7912] close(16) = -1 EBADF (Bad file descriptor) [pid 7912] close(17) = -1 EBADF (Bad file descriptor) [pid 7912] close(18) = -1 EBADF (Bad file descriptor) [pid 7912] close(19) = -1 EBADF (Bad file descriptor) [pid 7912] close(20) = -1 EBADF (Bad file descriptor) [pid 7912] close(21) = -1 EBADF (Bad file descriptor) [pid 7912] close(22) = -1 EBADF (Bad file descriptor) [pid 7912] close(23) = -1 EBADF (Bad file descriptor) [pid 7912] close(24) = -1 EBADF (Bad file descriptor) [pid 7912] close(25) = -1 EBADF (Bad file descriptor) [pid 7912] close(26) = -1 EBADF (Bad file descriptor) [pid 7912] close(27) = -1 EBADF (Bad file descriptor) [pid 7912] close(28) = -1 EBADF (Bad file descriptor) [pid 7912] close(29) = -1 EBADF (Bad file descriptor) [pid 7912] exit_group(0) = ? [pid 7913] <... futex resumed>) = ? [pid 7914] <... futex resumed>) = ? [pid 7913] +++ exited with 0 +++ [pid 7914] +++ exited with 0 +++ [pid 7912] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2870, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./963", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./963", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./963/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./963/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./963/cgroup.cpu") = 0 [pid 5028] umount2("./963/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./963/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./963/binderfs") = 0 [pid 5028] umount2("./963/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./963/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./963/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./963/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./963/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./963/file0") = 0 [pid 5028] umount2("./963/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./963/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./963/cgroup") = 0 [pid 5028] umount2("./963/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./963/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./963/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./963") = 0 [pid 5028] mkdir("./964", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7915 attached , child_tidptr=0x5555563a5690) = 2873 [pid 7915] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7915] chdir("./964") = 0 [pid 7915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7915] setpgid(0, 0) = 0 [pid 7915] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7915] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7915] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7915] write(3, "1000", 4) = 4 [pid 7915] close(3) = 0 [pid 7915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7915] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7915] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7915] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7915] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7915] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7915] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7916 attached [pid 7916] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7916] set_robust_list(0x7feeffcce9a0, 24 [pid 7915] <... clone3 resumed> => {parent_tid=[2874]}, 88) = 2874 [pid 7916] <... set_robust_list resumed>) = 0 [pid 7915] rt_sigprocmask(SIG_SETMASK, [], [pid 7916] rt_sigprocmask(SIG_SETMASK, [], [pid 7915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7916] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7915] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7916] memfd_create("syzkaller", 0) = 3 [pid 7915] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7916] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7916] munmap(0x7feef78ae000, 2097152) = 0 [pid 7916] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7916] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7916] close(3) = 0 [pid 7916] mkdir("./file0", 0777) = 0 [pid 7916] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7916] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7916] chdir("./file0") = 0 [pid 7916] ioctl(4, LOOP_CLR_FD) = 0 [pid 7916] close(4) = 0 [pid 7916] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7915] <... futex resumed>) = 0 [pid 7915] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7915] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7916] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7916] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7916] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7915] <... futex resumed>) = 0 [pid 7915] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7916] <... futex resumed>) = 0 [pid 7915] <... futex resumed>) = 1 [pid 7916] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7915] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7916] <... openat resumed>) = 5 [pid 7916] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7916] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7915] <... futex resumed>) = 0 [pid 7915] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7915] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7916] <... futex resumed>) = 0 [ 289.510220][ T7916] loop0: detected capacity change from 0 to 4096 [ 289.519396][ T7916] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 289.552316][ T7916] ntfs: volume version 3.1. [pid 7916] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7915] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7915] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7915] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7915] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7915] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7917 attached [pid 7917] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7915] <... clone3 resumed> => {parent_tid=[2875]}, 88) = 2875 [pid 7917] <... rseq resumed>) = 0 [pid 7915] rt_sigprocmask(SIG_SETMASK, [], [pid 7917] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7917] rt_sigprocmask(SIG_SETMASK, [], [pid 7915] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7917] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7915] <... futex resumed>) = 0 [pid 7917] ftruncate(4, 0 [pid 7915] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7917] <... ftruncate resumed>) = 0 [pid 7917] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7916] <... write resumed>) = 1048064 [pid 7917] <... futex resumed>) = 1 [pid 7917] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7916] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7915] <... futex resumed>) = 0 [pid 7916] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7915] close(3) = 0 [pid 7915] close(4) = 0 [pid 7915] close(5) = 0 [pid 7915] close(6) = -1 EBADF (Bad file descriptor) [pid 7915] close(7) = -1 EBADF (Bad file descriptor) [pid 7915] close(8) = -1 EBADF (Bad file descriptor) [pid 7915] close(9) = -1 EBADF (Bad file descriptor) [pid 7915] close(10) = -1 EBADF (Bad file descriptor) [pid 7915] close(11) = -1 EBADF (Bad file descriptor) [pid 7915] close(12) = -1 EBADF (Bad file descriptor) [pid 7915] close(13) = -1 EBADF (Bad file descriptor) [pid 7915] close(14) = -1 EBADF (Bad file descriptor) [pid 7915] close(15) = -1 EBADF (Bad file descriptor) [pid 7915] close(16) = -1 EBADF (Bad file descriptor) [pid 7915] close(17) = -1 EBADF (Bad file descriptor) [pid 7915] close(18) = -1 EBADF (Bad file descriptor) [pid 7915] close(19) = -1 EBADF (Bad file descriptor) [pid 7915] close(20) = -1 EBADF (Bad file descriptor) [pid 7915] close(21) = -1 EBADF (Bad file descriptor) [pid 7915] close(22) = -1 EBADF (Bad file descriptor) [pid 7915] close(23) = -1 EBADF (Bad file descriptor) [pid 7915] close(24) = -1 EBADF (Bad file descriptor) [pid 7915] close(25) = -1 EBADF (Bad file descriptor) [pid 7915] close(26) = -1 EBADF (Bad file descriptor) [pid 7915] close(27) = -1 EBADF (Bad file descriptor) [pid 7915] close(28) = -1 EBADF (Bad file descriptor) [pid 7915] close(29) = -1 EBADF (Bad file descriptor) [pid 7915] exit_group(0 [pid 7916] <... futex resumed>) = ? [pid 7915] <... exit_group resumed>) = ? [pid 7917] <... futex resumed>) = ? [pid 7916] +++ exited with 0 +++ [pid 7917] +++ exited with 0 +++ [pid 7915] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2873, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./964", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./964", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./964/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./964/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./964/cgroup.cpu") = 0 [pid 5028] umount2("./964/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./964/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./964/binderfs") = 0 [pid 5028] umount2("./964/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./964/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./964/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./964/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./964/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./964/file0") = 0 [pid 5028] umount2("./964/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./964/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./964/cgroup") = 0 [pid 5028] umount2("./964/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./964/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./964/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./964") = 0 [pid 5028] mkdir("./965", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7918 attached , child_tidptr=0x5555563a5690) = 2876 [pid 7918] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7918] chdir("./965") = 0 [pid 7918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7918] setpgid(0, 0) = 0 [pid 7918] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7918] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7918] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7918] write(3, "1000", 4) = 4 [pid 7918] close(3) = 0 [pid 7918] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7918] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7918] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7918] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7918] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7918] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7918] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7919 attached [pid 7919] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7918] <... clone3 resumed> => {parent_tid=[2877]}, 88) = 2877 [pid 7919] <... rseq resumed>) = 0 [pid 7918] rt_sigprocmask(SIG_SETMASK, [], [pid 7919] set_robust_list(0x7feeffcce9a0, 24 [pid 7918] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7919] <... set_robust_list resumed>) = 0 [pid 7919] rt_sigprocmask(SIG_SETMASK, [], [pid 7918] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7919] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7918] <... futex resumed>) = 0 [pid 7918] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7919] memfd_create("syzkaller", 0) = 3 [pid 7919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7919] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7919] munmap(0x7feef78ae000, 2097152) = 0 [pid 7919] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7919] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7919] close(3) = 0 [pid 7919] mkdir("./file0", 0777) = 0 [pid 7919] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7919] chdir("./file0") = 0 [pid 7919] ioctl(4, LOOP_CLR_FD) = 0 [pid 7919] close(4) = 0 [pid 7919] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7919] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7918] <... futex resumed>) = 0 [pid 7918] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7918] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7919] <... futex resumed>) = 0 [pid 7919] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7919] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7919] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7918] <... futex resumed>) = 0 [pid 7918] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7919] <... futex resumed>) = 0 [pid 7918] <... futex resumed>) = 1 [pid 7918] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7919] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7919] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7918] <... futex resumed>) = 0 [pid 7918] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7919] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 289.833874][ T7919] loop0: detected capacity change from 0 to 4096 [ 289.842906][ T7919] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 289.876451][ T7919] ntfs: volume version 3.1. [pid 7918] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7918] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7918] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7918] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7918] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7920 attached => {parent_tid=[2878]}, 88) = 2878 [pid 7918] rt_sigprocmask(SIG_SETMASK, [], [pid 7920] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7918] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7918] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7920] set_robust_list(0x7feef7aad9a0, 24 [pid 7918] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7920] <... set_robust_list resumed>) = 0 [pid 7920] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7920] ftruncate(4, 0) = 0 [pid 7920] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7919] <... write resumed>) = 1048064 [pid 7920] <... futex resumed>) = 1 [pid 7919] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7918] <... futex resumed>) = 0 [pid 7920] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7919] <... futex resumed>) = 0 [pid 7918] close(3 [pid 7919] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7918] <... close resumed>) = 0 [pid 7918] close(4) = 0 [pid 7918] close(5) = 0 [pid 7918] close(6) = -1 EBADF (Bad file descriptor) [pid 7918] close(7) = -1 EBADF (Bad file descriptor) [pid 7918] close(8) = -1 EBADF (Bad file descriptor) [pid 7918] close(9) = -1 EBADF (Bad file descriptor) [pid 7918] close(10) = -1 EBADF (Bad file descriptor) [pid 7918] close(11) = -1 EBADF (Bad file descriptor) [pid 7918] close(12) = -1 EBADF (Bad file descriptor) [pid 7918] close(13) = -1 EBADF (Bad file descriptor) [pid 7918] close(14) = -1 EBADF (Bad file descriptor) [pid 7918] close(15) = -1 EBADF (Bad file descriptor) [pid 7918] close(16) = -1 EBADF (Bad file descriptor) [pid 7918] close(17) = -1 EBADF (Bad file descriptor) [pid 7918] close(18) = -1 EBADF (Bad file descriptor) [pid 7918] close(19) = -1 EBADF (Bad file descriptor) [pid 7918] close(20) = -1 EBADF (Bad file descriptor) [pid 7918] close(21) = -1 EBADF (Bad file descriptor) [pid 7918] close(22) = -1 EBADF (Bad file descriptor) [pid 7918] close(23) = -1 EBADF (Bad file descriptor) [pid 7918] close(24) = -1 EBADF (Bad file descriptor) [pid 7918] close(25) = -1 EBADF (Bad file descriptor) [pid 7918] close(26) = -1 EBADF (Bad file descriptor) [pid 7918] close(27) = -1 EBADF (Bad file descriptor) [pid 7918] close(28) = -1 EBADF (Bad file descriptor) [pid 7918] close(29) = -1 EBADF (Bad file descriptor) [pid 7918] exit_group(0 [pid 7919] <... futex resumed>) = ? [pid 7920] <... futex resumed>) = ? [pid 7918] <... exit_group resumed>) = ? [pid 7920] +++ exited with 0 +++ [pid 7919] +++ exited with 0 +++ [pid 7918] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2876, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5028] umount2("./965", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./965", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./965/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./965/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./965/cgroup.cpu") = 0 [pid 5028] umount2("./965/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./965/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./965/binderfs") = 0 [pid 5028] umount2("./965/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./965/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./965/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./965/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./965/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./965/file0") = 0 [pid 5028] umount2("./965/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./965/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./965/cgroup") = 0 [pid 5028] umount2("./965/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./965/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./965/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./965") = 0 [pid 5028] mkdir("./966", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7921 attached , child_tidptr=0x5555563a5690) = 2879 [pid 7921] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7921] chdir("./966") = 0 [pid 7921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7921] setpgid(0, 0) = 0 [pid 7921] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7921] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7921] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7921] write(3, "1000", 4) = 4 [pid 7921] close(3) = 0 [pid 7921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7921] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7921] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7921] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7921] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7921] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7921] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7921] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7922 attached => {parent_tid=[2880]}, 88) = 2880 [pid 7921] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7921] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7921] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7922] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7922] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7922] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7922] memfd_create("syzkaller", 0) = 3 [pid 7922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7922] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7922] munmap(0x7feef78ae000, 2097152) = 0 [pid 7922] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7922] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7922] close(3) = 0 [pid 7922] mkdir("./file0", 0777) = 0 [pid 7922] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7922] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7922] chdir("./file0") = 0 [pid 7922] ioctl(4, LOOP_CLR_FD) = 0 [pid 7922] close(4) = 0 [pid 7922] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7921] <... futex resumed>) = 0 [pid 7922] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7921] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7921] <... futex resumed>) = 0 [pid 7922] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7921] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7922] <... openat resumed>) = 4 [pid 7922] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7921] <... futex resumed>) = 0 [pid 7922] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7921] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7922] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7921] <... futex resumed>) = 0 [pid 7921] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7922] <... openat resumed>) = 5 [pid 7922] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7921] <... futex resumed>) = 0 [pid 7921] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7922] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7921] <... futex resumed>) = 0 [ 290.094614][ T7922] loop0: detected capacity change from 0 to 4096 [ 290.103397][ T7922] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 290.136169][ T7922] ntfs: volume version 3.1. [pid 7921] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7921] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7921] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7921] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7921] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7921] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7923 attached [pid 7923] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053) = 0 [pid 7921] <... clone3 resumed> => {parent_tid=[2881]}, 88) = 2881 [pid 7923] set_robust_list(0x7feef7aad9a0, 24 [pid 7921] rt_sigprocmask(SIG_SETMASK, [], [pid 7923] <... set_robust_list resumed>) = 0 [pid 7921] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7923] rt_sigprocmask(SIG_SETMASK, [], [pid 7921] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7923] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7921] <... futex resumed>) = 0 [pid 7923] ftruncate(4, 0 [pid 7921] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7923] <... ftruncate resumed>) = 0 [pid 7923] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7922] <... write resumed>) = 1048064 [pid 7923] <... futex resumed>) = 1 [pid 7922] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7921] <... futex resumed>) = 0 [pid 7923] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7922] <... futex resumed>) = 0 [pid 7922] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7921] close(3) = 0 [pid 7921] close(4) = 0 [pid 7921] close(5) = 0 [pid 7921] close(6) = -1 EBADF (Bad file descriptor) [pid 7921] close(7) = -1 EBADF (Bad file descriptor) [pid 7921] close(8) = -1 EBADF (Bad file descriptor) [pid 7921] close(9) = -1 EBADF (Bad file descriptor) [pid 7921] close(10) = -1 EBADF (Bad file descriptor) [pid 7921] close(11) = -1 EBADF (Bad file descriptor) [pid 7921] close(12) = -1 EBADF (Bad file descriptor) [pid 7921] close(13) = -1 EBADF (Bad file descriptor) [pid 7921] close(14) = -1 EBADF (Bad file descriptor) [pid 7921] close(15) = -1 EBADF (Bad file descriptor) [pid 7921] close(16) = -1 EBADF (Bad file descriptor) [pid 7921] close(17) = -1 EBADF (Bad file descriptor) [pid 7921] close(18) = -1 EBADF (Bad file descriptor) [pid 7921] close(19) = -1 EBADF (Bad file descriptor) [pid 7921] close(20) = -1 EBADF (Bad file descriptor) [pid 7921] close(21) = -1 EBADF (Bad file descriptor) [pid 7921] close(22) = -1 EBADF (Bad file descriptor) [pid 7921] close(23) = -1 EBADF (Bad file descriptor) [pid 7921] close(24) = -1 EBADF (Bad file descriptor) [pid 7921] close(25) = -1 EBADF (Bad file descriptor) [pid 7921] close(26) = -1 EBADF (Bad file descriptor) [pid 7921] close(27) = -1 EBADF (Bad file descriptor) [pid 7921] close(28) = -1 EBADF (Bad file descriptor) [pid 7921] close(29) = -1 EBADF (Bad file descriptor) [pid 7921] exit_group(0 [pid 7922] <... futex resumed>) = ? [pid 7923] <... futex resumed>) = ? [pid 7921] <... exit_group resumed>) = ? [pid 7922] +++ exited with 0 +++ [pid 7923] +++ exited with 0 +++ [pid 7921] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2879, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5028] umount2("./966", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./966", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./966/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./966/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./966/cgroup.cpu") = 0 [pid 5028] umount2("./966/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./966/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./966/binderfs") = 0 [pid 5028] umount2("./966/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./966/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./966/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./966/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./966/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./966/file0") = 0 [pid 5028] umount2("./966/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./966/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./966/cgroup") = 0 [pid 5028] umount2("./966/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./966/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./966/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./966") = 0 [pid 5028] mkdir("./967", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7924 attached , child_tidptr=0x5555563a5690) = 2882 [pid 7924] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7924] chdir("./967") = 0 [pid 7924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7924] setpgid(0, 0) = 0 [pid 7924] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7924] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7924] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7924] write(3, "1000", 4) = 4 [pid 7924] close(3) = 0 [pid 7924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7924] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7924] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7924] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7924] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7924] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7924] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7925 attached [pid 7925] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7924] <... clone3 resumed> => {parent_tid=[2883]}, 88) = 2883 [pid 7924] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7924] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7924] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7925] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7925] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7925] memfd_create("syzkaller", 0) = 3 [pid 7925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7925] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7925] munmap(0x7feef78ae000, 2097152) = 0 [pid 7925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7925] close(3) = 0 [pid 7925] mkdir("./file0", 0777) = 0 [pid 7925] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7925] chdir("./file0") = 0 [pid 7925] ioctl(4, LOOP_CLR_FD) = 0 [pid 7925] close(4) = 0 [pid 7925] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7925] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7924] <... futex resumed>) = 0 [pid 7924] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7925] <... futex resumed>) = 0 [pid 7924] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7925] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7925] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7925] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7924] <... futex resumed>) = 0 [pid 7924] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7925] <... futex resumed>) = 0 [pid 7925] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7924] <... futex resumed>) = 1 [pid 7925] <... openat resumed>) = 5 [pid 7925] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7924] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7925] <... futex resumed>) = 0 [pid 7925] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7924] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7925] <... futex resumed>) = 0 [pid 7924] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 290.392279][ T7925] loop0: detected capacity change from 0 to 4096 [ 290.401595][ T7925] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 290.434512][ T7925] ntfs: volume version 3.1. [pid 7925] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7924] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7924] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7924] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7924] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7926 attached [pid 7926] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7924] <... clone3 resumed> => {parent_tid=[2884]}, 88) = 2884 [pid 7926] <... rseq resumed>) = 0 [pid 7924] rt_sigprocmask(SIG_SETMASK, [], [pid 7926] set_robust_list(0x7feef7aad9a0, 24 [pid 7924] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7926] <... set_robust_list resumed>) = 0 [pid 7924] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7926] rt_sigprocmask(SIG_SETMASK, [], [pid 7924] <... futex resumed>) = 0 [pid 7926] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7924] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7926] ftruncate(4, 0) = 0 [pid 7926] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7925] <... write resumed>) = 1048064 [pid 7924] <... futex resumed>) = 0 [pid 7926] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7925] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7924] close(3 [pid 7925] <... futex resumed>) = 0 [pid 7924] <... close resumed>) = 0 [pid 7925] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7924] close(4) = 0 [pid 7924] close(5) = 0 [pid 7924] close(6) = -1 EBADF (Bad file descriptor) [pid 7924] close(7) = -1 EBADF (Bad file descriptor) [pid 7924] close(8) = -1 EBADF (Bad file descriptor) [pid 7924] close(9) = -1 EBADF (Bad file descriptor) [pid 7924] close(10) = -1 EBADF (Bad file descriptor) [pid 7924] close(11) = -1 EBADF (Bad file descriptor) [pid 7924] close(12) = -1 EBADF (Bad file descriptor) [pid 7924] close(13) = -1 EBADF (Bad file descriptor) [pid 7924] close(14) = -1 EBADF (Bad file descriptor) [pid 7924] close(15) = -1 EBADF (Bad file descriptor) [pid 7924] close(16) = -1 EBADF (Bad file descriptor) [pid 7924] close(17) = -1 EBADF (Bad file descriptor) [pid 7924] close(18) = -1 EBADF (Bad file descriptor) [pid 7924] close(19) = -1 EBADF (Bad file descriptor) [pid 7924] close(20) = -1 EBADF (Bad file descriptor) [pid 7924] close(21) = -1 EBADF (Bad file descriptor) [pid 7924] close(22) = -1 EBADF (Bad file descriptor) [pid 7924] close(23) = -1 EBADF (Bad file descriptor) [pid 7924] close(24) = -1 EBADF (Bad file descriptor) [pid 7924] close(25) = -1 EBADF (Bad file descriptor) [pid 7924] close(26) = -1 EBADF (Bad file descriptor) [pid 7924] close(27) = -1 EBADF (Bad file descriptor) [pid 7924] close(28) = -1 EBADF (Bad file descriptor) [pid 7924] close(29) = -1 EBADF (Bad file descriptor) [pid 7924] exit_group(0) = ? [pid 7926] <... futex resumed>) = ? [pid 7925] <... futex resumed>) = ? [pid 7926] +++ exited with 0 +++ [pid 7925] +++ exited with 0 +++ [pid 7924] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2882, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./967", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./967", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./967/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./967/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./967/cgroup.cpu") = 0 [pid 5028] umount2("./967/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./967/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./967/binderfs") = 0 [pid 5028] umount2("./967/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./967/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./967/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./967/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./967/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./967/file0") = 0 [pid 5028] umount2("./967/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./967/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./967/cgroup") = 0 [pid 5028] umount2("./967/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./967/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./967/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./967") = 0 [pid 5028] mkdir("./968", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555563a5690) = 2885 ./strace-static-x86_64: Process 7927 attached [pid 7927] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7927] chdir("./968") = 0 [pid 7927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7927] setpgid(0, 0) = 0 [pid 7927] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7927] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7927] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7927] write(3, "1000", 4) = 4 [pid 7927] close(3) = 0 [pid 7927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7927] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7927] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7927] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7927] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7927] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7927] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7927] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7928 attached [pid 7928] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7927] <... clone3 resumed> => {parent_tid=[2886]}, 88) = 2886 [pid 7927] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7927] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7927] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7928] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7928] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7928] memfd_create("syzkaller", 0) = 3 [pid 7928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7928] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7928] munmap(0x7feef78ae000, 2097152) = 0 [pid 7928] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7928] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7928] close(3) = 0 [pid 7928] mkdir("./file0", 0777) = 0 [pid 7928] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7928] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7928] chdir("./file0") = 0 [pid 7928] ioctl(4, LOOP_CLR_FD) = 0 [pid 7928] close(4) = 0 [pid 7928] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7927] <... futex resumed>) = 0 [pid 7928] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 7927] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7928] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7927] <... futex resumed>) = 0 [pid 7928] <... openat resumed>) = 4 [pid 7927] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7928] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7927] <... futex resumed>) = 0 [pid 7928] <... futex resumed>) = 1 [pid 7927] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7928] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 [pid 7927] <... futex resumed>) = 0 [pid 7928] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7928] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7927] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 7927] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7928] <... futex resumed>) = 0 [pid 7928] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [ 290.726979][ T7928] loop0: detected capacity change from 0 to 4096 [ 290.748348][ T7928] ntfs: volume version 3.1. [pid 7927] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 7927] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7927] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7927] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7927] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7927] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7929 attached [pid 7929] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7927] <... clone3 resumed> => {parent_tid=[2887]}, 88) = 2887 [pid 7929] <... rseq resumed>) = 0 [pid 7927] rt_sigprocmask(SIG_SETMASK, [], [pid 7929] set_robust_list(0x7feef7aad9a0, 24) = 0 [pid 7927] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7927] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7929] rt_sigprocmask(SIG_SETMASK, [], [pid 7927] <... futex resumed>) = 0 [pid 7929] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7929] ftruncate(4, 0 [pid 7927] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7929] <... ftruncate resumed>) = 0 [pid 7929] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7928] <... write resumed>) = 1048064 [pid 7928] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7927] <... futex resumed>) = 0 [pid 7927] close(3 [pid 7929] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7927] <... close resumed>) = 0 [pid 7927] close(4) = 0 [pid 7927] close(5) = 0 [pid 7927] close(6) = -1 EBADF (Bad file descriptor) [pid 7927] close(7) = -1 EBADF (Bad file descriptor) [pid 7927] close(8) = -1 EBADF (Bad file descriptor) [pid 7927] close(9) = -1 EBADF (Bad file descriptor) [pid 7927] close(10) = -1 EBADF (Bad file descriptor) [pid 7927] close(11) = -1 EBADF (Bad file descriptor) [pid 7927] close(12) = -1 EBADF (Bad file descriptor) [pid 7927] close(13) = -1 EBADF (Bad file descriptor) [pid 7927] close(14) = -1 EBADF (Bad file descriptor) [pid 7928] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7927] close(15) = -1 EBADF (Bad file descriptor) [pid 7927] close(16) = -1 EBADF (Bad file descriptor) [pid 7927] close(17) = -1 EBADF (Bad file descriptor) [pid 7927] close(18) = -1 EBADF (Bad file descriptor) [pid 7927] close(19) = -1 EBADF (Bad file descriptor) [pid 7927] close(20) = -1 EBADF (Bad file descriptor) [pid 7927] close(21) = -1 EBADF (Bad file descriptor) [pid 7927] close(22) = -1 EBADF (Bad file descriptor) [pid 7927] close(23) = -1 EBADF (Bad file descriptor) [pid 7927] close(24) = -1 EBADF (Bad file descriptor) [pid 7927] close(25) = -1 EBADF (Bad file descriptor) [pid 7927] close(26) = -1 EBADF (Bad file descriptor) [pid 7927] close(27) = -1 EBADF (Bad file descriptor) [pid 7927] close(28) = -1 EBADF (Bad file descriptor) [pid 7927] close(29) = -1 EBADF (Bad file descriptor) [pid 7927] exit_group(0 [pid 7929] <... futex resumed>) = ? [pid 7927] <... exit_group resumed>) = ? [pid 7928] <... futex resumed>) = ? [pid 7928] +++ exited with 0 +++ [pid 7929] +++ exited with 0 +++ [pid 7927] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2885, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./968", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./968", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./968/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./968/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./968/cgroup.cpu") = 0 [pid 5028] umount2("./968/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./968/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./968/binderfs") = 0 [pid 5028] umount2("./968/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./968/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./968/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./968/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./968/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./968/file0") = 0 [pid 5028] umount2("./968/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./968/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./968/cgroup") = 0 [pid 5028] umount2("./968/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./968/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./968/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./968") = 0 [pid 5028] mkdir("./969", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7930 attached , child_tidptr=0x5555563a5690) = 2888 [pid 7930] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7930] chdir("./969") = 0 [pid 7930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7930] setpgid(0, 0) = 0 [pid 7930] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7930] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7930] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7930] write(3, "1000", 4) = 4 [pid 7930] close(3) = 0 [pid 7930] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7930] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7930] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7930] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7930] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7930] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7930] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7930] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7931 attached [pid 7931] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7931] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7930] <... clone3 resumed> => {parent_tid=[2889]}, 88) = 2889 [pid 7931] rt_sigprocmask(SIG_SETMASK, [], [pid 7930] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7931] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7930] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7930] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7931] memfd_create("syzkaller", 0) = 3 [pid 7931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7931] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7931] munmap(0x7feef78ae000, 2097152) = 0 [pid 7931] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7931] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7931] close(3) = 0 [pid 7931] mkdir("./file0", 0777) = 0 [pid 7931] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7931] chdir("./file0") = 0 [pid 7931] ioctl(4, LOOP_CLR_FD) = 0 [pid 7931] close(4) = 0 [pid 7931] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7931] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7930] <... futex resumed>) = 0 [pid 7930] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7931] <... futex resumed>) = 0 [pid 7930] <... futex resumed>) = 1 [pid 7931] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7930] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7931] <... openat resumed>) = 4 [pid 7931] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7930] <... futex resumed>) = 0 [pid 7931] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7930] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7930] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7931] <... openat resumed>) = 5 [pid 7931] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7930] <... futex resumed>) = 0 [pid 7931] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7930] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7931] <... futex resumed>) = 0 [pid 7930] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 291.031692][ T7931] loop0: detected capacity change from 0 to 4096 [ 291.058694][ T7931] ntfs: volume version 3.1. [pid 7931] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7930] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7930] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7930] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7930] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7930] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7930] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7932 attached => {parent_tid=[2890]}, 88) = 2890 [pid 7932] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7930] rt_sigprocmask(SIG_SETMASK, [], [pid 7932] <... rseq resumed>) = 0 [pid 7930] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7932] set_robust_list(0x7feef7aad9a0, 24 [pid 7930] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7932] <... set_robust_list resumed>) = 0 [pid 7930] <... futex resumed>) = 0 [pid 7932] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7930] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7932] ftruncate(4, 0 [pid 7930] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7932] <... ftruncate resumed>) = 0 [pid 7932] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7932] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7931] <... write resumed>) = 1048064 [pid 7931] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7931] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7930] close(3) = 0 [pid 7930] close(4) = 0 [pid 7930] close(5) = 0 [pid 7930] close(6) = -1 EBADF (Bad file descriptor) [pid 7930] close(7) = -1 EBADF (Bad file descriptor) [pid 7930] close(8) = -1 EBADF (Bad file descriptor) [pid 7930] close(9) = -1 EBADF (Bad file descriptor) [pid 7930] close(10) = -1 EBADF (Bad file descriptor) [pid 7930] close(11) = -1 EBADF (Bad file descriptor) [pid 7930] close(12) = -1 EBADF (Bad file descriptor) [pid 7930] close(13) = -1 EBADF (Bad file descriptor) [pid 7930] close(14) = -1 EBADF (Bad file descriptor) [pid 7930] close(15) = -1 EBADF (Bad file descriptor) [pid 7930] close(16) = -1 EBADF (Bad file descriptor) [pid 7930] close(17) = -1 EBADF (Bad file descriptor) [pid 7930] close(18) = -1 EBADF (Bad file descriptor) [pid 7930] close(19) = -1 EBADF (Bad file descriptor) [pid 7930] close(20) = -1 EBADF (Bad file descriptor) [pid 7930] close(21) = -1 EBADF (Bad file descriptor) [pid 7930] close(22) = -1 EBADF (Bad file descriptor) [pid 7930] close(23) = -1 EBADF (Bad file descriptor) [pid 7930] close(24) = -1 EBADF (Bad file descriptor) [pid 7930] close(25) = -1 EBADF (Bad file descriptor) [pid 7930] close(26) = -1 EBADF (Bad file descriptor) [pid 7930] close(27) = -1 EBADF (Bad file descriptor) [pid 7930] close(28) = -1 EBADF (Bad file descriptor) [pid 7930] close(29) = -1 EBADF (Bad file descriptor) [pid 7930] exit_group(0) = ? [pid 7931] <... futex resumed>) = ? [pid 7932] <... futex resumed>) = ? [pid 7931] +++ exited with 0 +++ [pid 7932] +++ exited with 0 +++ [pid 7930] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2888, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./969", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./969", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./969/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./969/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./969/cgroup.cpu") = 0 [pid 5028] umount2("./969/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./969/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./969/binderfs") = 0 [pid 5028] umount2("./969/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./969/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./969/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./969/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./969/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./969/file0") = 0 [pid 5028] umount2("./969/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./969/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./969/cgroup") = 0 [pid 5028] umount2("./969/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./969/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./969/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./969") = 0 [pid 5028] mkdir("./970", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7933 attached , child_tidptr=0x5555563a5690) = 2891 [pid 7933] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7933] chdir("./970") = 0 [pid 7933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7933] setpgid(0, 0) = 0 [pid 7933] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7933] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7933] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7933] write(3, "1000", 4) = 4 [pid 7933] close(3) = 0 [pid 7933] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7933] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7933] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7933] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7933] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7933] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7933] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0} => {parent_tid=[2892]}, 88) = 2892 [pid 7933] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7933] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7933] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 7934 attached [pid 7934] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053) = 0 [pid 7934] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7934] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7934] memfd_create("syzkaller", 0) = 3 [pid 7934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7934] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 7934] munmap(0x7feef78ae000, 2097152) = 0 [pid 7934] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7934] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7934] close(3) = 0 [pid 7934] mkdir("./file0", 0777) = 0 [pid 7934] mount("/dev/loop0", "./file0", "ntfs", 0, "umask=00000000000040000000001,gid=0x000000000000ee00,utf8,mft_zone_multiplier=0x0000000000000003,nls"...) = 0 [pid 7934] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 7934] chdir("./file0") = 0 [pid 7934] ioctl(4, LOOP_CLR_FD) = 0 [pid 7934] close(4) = 0 [pid 7934] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7934] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7933] <... futex resumed>) = 0 [pid 7933] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7934] <... futex resumed>) = 0 [pid 7933] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7934] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 7934] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7933] <... futex resumed>) = 0 [pid 7934] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 7933] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7934] <... openat resumed>) = 5 [pid 7933] <... futex resumed>) = 0 [pid 7934] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7933] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7934] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7933] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 7933] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 7934] <... futex resumed>) = 0 [pid 7933] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 291.426438][ T7934] loop0: detected capacity change from 0 to 4096 [ 291.447725][ T7934] ntfs: volume version 3.1. [pid 7934] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064 [pid 7933] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7933] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feef7a8d000 [pid 7933] mprotect(0x7feef7a8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7933] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 291.687917][ T3244] [ 291.690287][ T3244] ====================================================== [ 291.697303][ T3244] WARNING: possible circular locking dependency detected [ 291.704306][ T3244] 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 Not tainted [ 291.711306][ T3244] ------------------------------------------------------ [ 291.718303][ T3244] kworker/u4:8/3244 is trying to acquire lock: [ 291.724433][ T3244] ffff888071068940 (&rl->lock){++++}-{3:3}, at: ntfs_read_folio+0x14cb/0x29c0 [ 291.733436][ T3244] [ 291.733436][ T3244] but task is already holding lock: [ 291.740787][ T3244] ffff88807126f510 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x630 [ 291.749735][ T3244] [ 291.749735][ T3244] which lock already depends on the new lock. [ 291.749735][ T3244] [ 291.760122][ T3244] [ 291.760122][ T3244] the existing dependency chain (in reverse order) is: [ 291.769116][ T3244] [ 291.769116][ T3244] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 291.776660][ T3244] __mutex_lock+0x136/0xd60 [ 291.781746][ T3244] map_mft_record+0x4c/0x630 [ 291.786848][ T3244] ntfs_attr_extend_allocation+0x539/0x4340 [ 291.793253][ T3244] ntfs_file_write_iter+0x37e/0x1970 [ 291.799041][ T3244] vfs_write+0x782/0xaf0 [ 291.803845][ T3244] ksys_write+0x1a0/0x2c0 [ 291.808694][ T3244] do_syscall_64+0x41/0xc0 [ 291.813659][ T3244] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 291.820099][ T3244] [ 291.820099][ T3244] -> #0 (&rl->lock){++++}-{3:3}: [ 291.827223][ T3244] __lock_acquire+0x39ff/0x7f70 [ 291.832645][ T3244] lock_acquire+0x1e3/0x520 [ 291.837672][ T3244] down_read+0xb1/0xa40 [ 291.842355][ T3244] ntfs_read_folio+0x14cb/0x29c0 [ 291.847812][ T3244] filemap_read_folio+0x19c/0x770 [ 291.853414][ T3244] do_read_cache_folio+0x134/0x810 [ 291.859039][ T3244] do_read_cache_page+0x30/0x210 [ 291.864487][ T3244] ntfs_sync_mft_mirror+0x25f/0x1ad0 [ 291.870282][ T3244] write_mft_record_nolock+0x1155/0x18d0 [ 291.876469][ T3244] write_mft_record+0x149/0x310 [ 291.881830][ T3244] __ntfs_write_inode+0x703/0xbb0 [ 291.887365][ T3244] __writeback_single_inode+0x69b/0xfa0 [ 291.893469][ T3244] writeback_sb_inodes+0x8e3/0x11d0 [ 291.899280][ T3244] __writeback_inodes_wb+0x11b/0x260 [ 291.905083][ T3244] wb_writeback+0x461/0xc60 [ 291.910096][ T3244] wb_workfn+0x98f/0xff0 [ 291.914906][ T3244] process_scheduled_works+0x90f/0x1400 [ 291.920984][ T3244] worker_thread+0xa5f/0xff0 [ 291.926085][ T3244] kthread+0x2d3/0x370 [ 291.930668][ T3244] ret_from_fork+0x48/0x80 [ 291.935604][ T3244] ret_from_fork_asm+0x11/0x20 [ 291.940889][ T3244] [ 291.940889][ T3244] other info that might help us debug this: [ 291.940889][ T3244] [ 291.951099][ T3244] Possible unsafe locking scenario: [ 291.951099][ T3244] [ 291.958530][ T3244] CPU0 CPU1 [ 291.963875][ T3244] ---- ---- [ 291.969221][ T3244] lock(&ni->mrec_lock); [ 291.973537][ T3244] lock(&rl->lock); [ 291.980284][ T3244] lock(&ni->mrec_lock); [ 291.987206][ T3244] rlock(&rl->lock); [ 291.991178][ T3244] [ 291.991178][ T3244] *** DEADLOCK *** [ 291.991178][ T3244] [ 291.999304][ T3244] 4 locks held by kworker/u4:8/3244: [ 292.004571][ T3244] #0: ffff888142651d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1400 [ 292.015786][ T3244] #1: ffffc9000ce1fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1400 [ 292.028208][ T3244] #2: ffff88802add40e0 (&type->s_umount_key#51){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 292.038861][ T3244] #3: ffff88807126f510 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x630 [ 292.048246][ T3244] [ 292.048246][ T3244] stack backtrace: [ 292.054116][ T3244] CPU: 0 PID: 3244 Comm: kworker/u4:8 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 292.064253][ T3244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 292.074294][ T3244] Workqueue: writeback wb_workfn (flush-7:0) [ 292.080273][ T3244] Call Trace: [ 292.083544][ T3244] [ 292.086465][ T3244] dump_stack_lvl+0x1e7/0x2d0 [ 292.091137][ T3244] ? nf_tcp_handle_invalid+0x650/0x650 [ 292.096584][ T3244] ? print_circular_bug+0x12b/0x1a0 [ 292.101777][ T3244] check_noncircular+0x375/0x4a0 [ 292.106706][ T3244] ? noop_count+0x30/0x30 [ 292.111036][ T3244] ? print_deadlock_bug+0x600/0x600 [ 292.116225][ T3244] ? lockdep_lock+0x123/0x2b0 [ 292.120889][ T3244] ? check_noncircular+0x205/0x4a0 [ 292.125993][ T3244] ? mark_lock+0x9a/0x340 [ 292.130307][ T3244] ? _find_first_zero_bit+0xd4/0x100 [ 292.135663][ T3244] __lock_acquire+0x39ff/0x7f70 [ 292.140510][ T3244] ? verify_lock_unused+0x140/0x140 [ 292.145702][ T3244] ? do_read_cache_folio+0x134/0x810 [ 292.150973][ T3244] ? verify_lock_unused+0x140/0x140 [ 292.156156][ T3244] ? write_mft_record+0x149/0x310 [ 292.161167][ T3244] ? verify_lock_unused+0x140/0x140 [ 292.166350][ T3244] ? __writeback_inodes_wb+0x11b/0x260 [ 292.171791][ T3244] ? wb_workfn+0x98f/0xff0 [ 292.176199][ T3244] ? process_scheduled_works+0x90f/0x1400 [ 292.181904][ T3244] ? worker_thread+0xa5f/0xff0 [ 292.186654][ T3244] ? ret_from_fork+0x48/0x80 [ 292.191233][ T3244] ? ret_from_fork_asm+0x11/0x20 [ 292.196165][ T3244] lock_acquire+0x1e3/0x520 [ 292.200654][ T3244] ? ntfs_read_folio+0x14cb/0x29c0 [ 292.205763][ T3244] ? read_lock_is_recursive+0x20/0x20 [ 292.211124][ T3244] ? __might_sleep+0xc0/0xc0 [ 292.215705][ T3244] ? mark_lock+0x9a/0x340 [ 292.220023][ T3244] down_read+0xb1/0xa40 [ 292.224170][ T3244] ? ntfs_read_folio+0x14cb/0x29c0 [ 292.229272][ T3244] ? print_irqtrace_events+0x220/0x220 [ 292.234721][ T3244] ? __down_common+0x7a0/0x7a0 [ 292.239479][ T3244] ? _raw_read_unlock_irqrestore+0x8f/0x140 [ 292.245414][ T3244] ? lockdep_hardirqs_on+0x98/0x140 [ 292.250604][ T3244] ? _raw_read_unlock_irqrestore+0xdd/0x140 [ 292.256488][ T3244] ? _raw_read_unlock+0x40/0x40 [ 292.261332][ T3244] ? do_raw_spin_unlock+0x13b/0x8b0 [ 292.266523][ T3244] ntfs_read_folio+0x14cb/0x29c0 [ 292.271464][ T3244] ? ntfs_writepage+0x1ab0/0x1ab0 [ 292.276482][ T3244] ? folio_add_lru+0x9d0/0x9d0 [ 292.281276][ T3244] ? folio_add_lru+0x4b2/0x9d0 [ 292.286025][ T3244] ? folio_add_lru+0x27b/0x9d0 [ 292.290775][ T3244] filemap_read_folio+0x19c/0x770 [ 292.295788][ T3244] ? ntfs_writepage+0x1ab0/0x1ab0 [ 292.300802][ T3244] ? maybe_unlock_mmap_for_io+0xe0/0xe0 [ 292.306336][ T3244] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 292.312598][ T3244] do_read_cache_folio+0x134/0x810 [ 292.317714][ T3244] ? ntfs_writepage+0x1ab0/0x1ab0 [ 292.322730][ T3244] do_read_cache_page+0x30/0x210 [ 292.327654][ T3244] ntfs_sync_mft_mirror+0x25f/0x1ad0 [ 292.332932][ T3244] ? submit_bio_noacct_nocheck+0xa2f/0xc60 [ 292.338783][ T3244] ? should_fail_request+0x80/0x80 [ 292.343883][ T3244] ? __mark_mft_record_dirty+0x180/0x180 [ 292.349508][ T3244] write_mft_record_nolock+0x1155/0x18d0 [ 292.355136][ T3244] ? ntfs_unmap_page+0x260/0x260 [ 292.360059][ T3244] ? lockdep_hardirqs_on+0x98/0x140 [ 292.365255][ T3244] write_mft_record+0x149/0x310 [ 292.370094][ T3244] __ntfs_write_inode+0x703/0xbb0 [ 292.375110][ T3244] __writeback_single_inode+0x69b/0xfa0 [ 292.380646][ T3244] writeback_sb_inodes+0x8e3/0x11d0 [ 292.385843][ T3244] ? queue_io+0x570/0x570 [ 292.390158][ T3244] ? _raw_spin_unlock+0x28/0x40 [ 292.394998][ T3244] ? move_expired_inodes+0x7c8/0x810 [ 292.400275][ T3244] ? do_raw_spin_lock+0x14d/0x3a0 [ 292.405299][ T3244] __writeback_inodes_wb+0x11b/0x260 [ 292.410593][ T3244] wb_writeback+0x461/0xc60 [ 292.415106][ T3244] ? percpu_ref_tryget+0x260/0x260 [ 292.420221][ T3244] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 292.426206][ T3244] wb_workfn+0x98f/0xff0 [ 292.430459][ T3244] ? inode_wait_for_writeback+0x290/0x290 [ 292.436175][ T3244] ? read_lock_is_recursive+0x20/0x20 [ 292.441538][ T3244] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 292.447513][ T3244] ? process_scheduled_works+0x825/0x1400 [ 292.453331][ T3244] process_scheduled_works+0x90f/0x1400 [ 292.458885][ T3244] ? assign_work+0x3d0/0x3d0 [ 292.463469][ T3244] ? assign_work+0x364/0x3d0 [ 292.468050][ T3244] worker_thread+0xa5f/0xff0 [ 292.472643][ T3244] kthread+0x2d3/0x370 [ 292.476708][ T3244] ? pr_cont_work+0x5e0/0x5e0 [ 292.481375][ T3244] ? kthread_blkcg+0xd0/0xd0 [ 292.486320][ T3244] ret_from_fork+0x48/0x80 [ 292.490734][ T3244] ? kthread_blkcg+0xd0/0xd0 [ 292.495332][ T3244] ret_from_fork_asm+0x11/0x20 [ 292.500102][ T3244] [pid 7933] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feef7aad990, parent_tid=0x7feef7aad990, exit_signal=0, stack=0x7feef7a8d000, stack_size=0x20300, tls=0x7feef7aad6c0}./strace-static-x86_64: Process 7935 attached [pid 7935] rseq(0x7feef7aadfe0, 0x20, 0, 0x53053053 [pid 7933] <... clone3 resumed> => {parent_tid=[2893]}, 88) = 2893 [pid 7935] <... rseq resumed>) = 0 [pid 7933] rt_sigprocmask(SIG_SETMASK, [], [pid 7935] set_robust_list(0x7feef7aad9a0, 24 [pid 7933] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7935] <... set_robust_list resumed>) = 0 [pid 7933] futex(0x7feeffdb96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7935] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7933] <... futex resumed>) = 0 [pid 7935] ftruncate(4, 0 [pid 7933] futex(0x7feeffdb96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 7935] <... ftruncate resumed>) = 0 [pid 7935] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7934] <... write resumed>) = 1048064 [pid 7935] <... futex resumed>) = 1 [pid 7934] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 7933] <... futex resumed>) = 0 [pid 7935] futex(0x7feeffdb96d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7934] <... futex resumed>) = 0 [pid 7933] close(3 [pid 7934] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7933] <... close resumed>) = 0 [pid 7933] close(4) = 0 [pid 7933] close(5) = 0 [pid 7933] close(6) = -1 EBADF (Bad file descriptor) [pid 7933] close(7) = -1 EBADF (Bad file descriptor) [pid 7933] close(8) = -1 EBADF (Bad file descriptor) [pid 7933] close(9) = -1 EBADF (Bad file descriptor) [pid 7933] close(10) = -1 EBADF (Bad file descriptor) [pid 7933] close(11) = -1 EBADF (Bad file descriptor) [pid 7933] close(12) = -1 EBADF (Bad file descriptor) [pid 7933] close(13) = -1 EBADF (Bad file descriptor) [pid 7933] close(14) = -1 EBADF (Bad file descriptor) [pid 7933] close(15) = -1 EBADF (Bad file descriptor) [pid 7933] close(16) = -1 EBADF (Bad file descriptor) [pid 7933] close(17) = -1 EBADF (Bad file descriptor) [pid 7933] close(18) = -1 EBADF (Bad file descriptor) [pid 7933] close(19) = -1 EBADF (Bad file descriptor) [pid 7933] close(20) = -1 EBADF (Bad file descriptor) [pid 7933] close(21) = -1 EBADF (Bad file descriptor) [pid 7933] close(22) = -1 EBADF (Bad file descriptor) [pid 7933] close(23) = -1 EBADF (Bad file descriptor) [pid 7933] close(24) = -1 EBADF (Bad file descriptor) [pid 7933] close(25) = -1 EBADF (Bad file descriptor) [pid 7933] close(26) = -1 EBADF (Bad file descriptor) [pid 7933] close(27) = -1 EBADF (Bad file descriptor) [pid 7933] close(28) = -1 EBADF (Bad file descriptor) [pid 7933] close(29) = -1 EBADF (Bad file descriptor) [pid 7933] exit_group(0) = ? [pid 7934] <... futex resumed>) = ? [pid 7935] <... futex resumed>) = ? [pid 7934] +++ exited with 0 +++ [pid 7935] +++ exited with 0 +++ [pid 7933] +++ exited with 0 +++ [pid 5028] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2891, si_uid=0, si_status=0, si_utime=0, si_stime=61 /* 0.61 s */} --- [pid 5028] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5028] umount2("./970", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./970", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5028] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 7 entries */, 32768) = 208 [pid 5028] umount2("./970/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./970/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./970/cgroup.cpu") = 0 [pid 5028] umount2("./970/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./970/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./970/binderfs") = 0 [pid 5028] umount2("./970/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5028] umount2("./970/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./970/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] umount2("./970/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] openat(AT_FDCWD, "./970/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5028] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5028] getdents64(4, 0x5555563ae770 /* 2 entries */, 32768) = 48 [pid 5028] getdents64(4, 0x5555563ae770 /* 0 entries */, 32768) = 0 [pid 5028] close(4) = 0 [pid 5028] rmdir("./970/file0") = 0 [pid 5028] umount2("./970/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./970/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./970/cgroup") = 0 [pid 5028] umount2("./970/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5028] newfstatat(AT_FDCWD, "./970/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5028] unlink("./970/cgroup.net") = 0 [pid 5028] getdents64(3, 0x5555563a6730 /* 0 entries */, 32768) = 0 [pid 5028] close(3) = 0 [pid 5028] rmdir("./970") = 0 [pid 5028] mkdir("./971", 0777) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5028] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5028] close(3) = 0 [pid 5028] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7936 attached , child_tidptr=0x5555563a5690) = 2894 [pid 7936] set_robust_list(0x5555563a56a0, 24) = 0 [pid 7936] chdir("./971") = 0 [pid 7936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7936] setpgid(0, 0) = 0 [pid 7936] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 7936] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 7936] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 7936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7936] write(3, "1000", 4) = 4 [pid 7936] close(3) = 0 [pid 7936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7936] futex(0x7feeffdb96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7936] rt_sigaction(SIGRT_1, {sa_handler=0x7feeffd38960, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7feeffd29b10}, NULL, 8) = 0 [pid 7936] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 7936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7feeffcae000 [pid 7936] mprotect(0x7feeffcaf000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 7936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 7936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7feeffcce990, parent_tid=0x7feeffcce990, exit_signal=0, stack=0x7feeffcae000, stack_size=0x20300, tls=0x7feeffcce6c0}./strace-static-x86_64: Process 7937 attached [pid 7937] rseq(0x7feeffccefe0, 0x20, 0, 0x53053053 [pid 7936] <... clone3 resumed> => {parent_tid=[2895]}, 88) = 2895 [pid 7936] rt_sigprocmask(SIG_SETMASK, [], [pid 7937] <... rseq resumed>) = 0 [pid 7936] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 7937] set_robust_list(0x7feeffcce9a0, 24) = 0 [pid 7937] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 7937] futex(0x7feeffdb96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 7936] futex(0x7feeffdb96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 7937] <... futex resumed>) = 0 [pid 7936] <... futex resumed>) = 1 [pid 7936] futex(0x7feeffdb96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 7937] memfd_create("syzkaller", 0) = 3 [pid 7937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feef78ae000 [pid 7937] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152 [pid 7936] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 7936] futex(0x7feeffdb96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 7936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5028] kill(-2894, SIGKILL) = 0 [pid 5028] kill(2894, SIGKILL) = 0